| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·c3973e601c552f71380d7e34d997a0e7·153244·admin·optional·ssg-applications_0.1.74-1_all.deb |
| 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb | 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb |
| 3 | ·9e0f79028a2599f98cf8c38047dd8791·2809032·admin·optional·ssg-debderived_0.1.74-1_all.deb | ||
| 4 | ·ff81655889bc61851f0651de394419d3·1232100·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | · | 3 | ·ee6961a492bf7bf7b08c8e86bc6dd640·2809696·admin·optional·ssg-debderived_0.1.74-1_all.deb |
| 4 | ·93e02a2c5fb3b1b32aafaa1e869adf56·1233084·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | ·981c476df17af182b40163ea83989cde·32378440·admin·optional·ssg-nondebian_0.1.74-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1724·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1724·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···151 | 3 | -rw-r--r--···0········0········0···151328·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038050:·6f66·2032·3032·3 | 00038050:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch | 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:google:chromium-browser | 54 | ····*·cpe:/a:google:chromium-browser |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m | 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m |
| 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 | 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 |
| 62 | rules | 62 | rules |
| 63 | Group ·Chromium· Group·contains·37·rules | 63 | Group ·Chromium· Group·contains·37·rules |
| 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and | 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038010:·6173·206f·6620·3230·323 | 00038010:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service | 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service |
| 58 | Group·contains·3·groups·and·15·rules | 58 | Group·contains·3·groups·and·15·rules |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038010:·3 | 00038010:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d20:·6173·206f·6620·3230·323 | 00037d20:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/a:mozilla:firefox | 41 | ····*·cpe:/a:mozilla:firefox |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group | 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group |
| 49 | and·9·rules | 49 | and·9·rules |
| 50 | Group ·Firefox· Group·contains·9·rules | 50 | Group ·Firefox· Group·contains·9·rules |
| 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web | 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web |
| Offset 14332, 15 lines modified | Offset 14332, 15 lines modified | ||
| 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038020:·3 | 00038020:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" | 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:mozilla:firefox | 54 | ····*·cpe:/a:mozilla:firefox |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d | 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d |
| 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups | 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups |
| 63 | and·34·rules | 63 | and·34·rules |
| 64 | Group ·Firefox· Group·contains·1·group·and·34·rules | 64 | Group ·Firefox· Group·contains·1·group·and·34·rules |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 1666, 15 lines modified | Offset 1666, 15 lines modified | ||
| 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1668 | ··········</xccdf-1.2:check> | 1668 | ··········</xccdf-1.2:check> |
| 1669 | ········</xccdf-1.2:Rule> | 1669 | ········</xccdf-1.2:Rule> |
| 1670 | ······</xccdf-1.2:Group> | 1670 | ······</xccdf-1.2:Group> |
| 1671 | ····</xccdf-1.2:Benchmark> | 1671 | ····</xccdf-1.2:Benchmark> |
| 1672 | ··</ds:component> | 1672 | ··</ds:component> |
| 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-0 | 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1675 | ······<oval-def:generator> | 1675 | ······<oval-def:generator> |
| 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 1678 | ········<oval:schema_version>5.11</oval:schema_version> | 1678 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1680 | ······</oval-def:generator> | 1680 | ······</oval-def:generator> |
| Offset 2530, 384 lines modified | Offset 2530, 384 lines modified | ||
| 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2534 | ······</oval-def:variables> | 2534 | ······</oval-def:variables> |
| 2535 | ····</oval-def:oval_definitions> | 2535 | ····</oval-def:oval_definitions> |
| 2536 | ··</ds:component> | 2536 | ··</ds:component> |
| 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-0 | 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2538 | ····<ocil:ocil> | 2538 | ····<ocil:ocil> |
| 2539 | ······<ocil:generator> | 2539 | ······<ocil:generator> |
| 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2544 | ······</ocil:generator> | 2544 | ······</ocil:generator> |
| 2545 | ······<ocil:questionnaires> | 2545 | ······<ocil:questionnaires> |
| 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> | ||
| 2547 | ··········<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> | ||
| 2548 | ··········<ocil:actions> | ||
| 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> | ||
| 2550 | ··········</ocil:actions> | ||
| 2551 | ········</ocil:questionnaire> | ||
| 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> | ||
| 2553 | ··········<ocil:title>Disable·3rd·Party·Cookies</ocil:title> | ||
| 2554 | ··········<ocil:actions> | ||
| 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> | ||
| 2556 | ··········</ocil:actions> | ||
| 2557 | ········</ocil:questionnaire> | ||
| 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_ | 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_block_plugins_ocil:questionnaire:1"> |
| 2547 | ··········<ocil:title>Block·Plugins·by·Default</ocil:title> | ||
| 2559 | ··········<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> | ||
| 2560 | ··········<ocil:actions> | ||
| 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> | ||
| 2562 | ··········</ocil:actions> | ||
| 2563 | ········</ocil:questionnaire> | ||
| 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_cleartext_passwords_ocil:questionnaire:1"> | ||
| 2565 | ··········<ocil:title>Disable·Use·of·Cleartext·Passwords</ocil:title> | ||
| 2566 | ··········<ocil:actions> | 2548 | ··········<ocil:actions> |
| 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_block_plugins_action:testaction:1</ocil:test_action_ref> |
| 2568 | ··········</ocil:actions> | 2550 | ··········</ocil:actions> |
| 2569 | ········</ocil:questionnaire> | 2551 | ········</ocil:questionnaire> |
| 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> | 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 2571 | ··········<ocil:title>Disable·Background·Processing</ocil:title> | 2553 | ··········<ocil:title>Disable·Background·Processing</ocil:title> |
| 2572 | ··········<ocil:actions> | 2554 | ··········<ocil:actions> |
| 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> | 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 2574 | ··········</ocil:actions> | 2556 | ··········</ocil:actions> |
| 2575 | ········</ocil:questionnaire> | 2557 | ········</ocil:questionnaire> |
| 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 2577 | ··········<ocil:title> | 2559 | ··········<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 2578 | ··········<ocil:actions> | 2560 | ··········<ocil:actions> |
| 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 2580 | ··········</ocil:actions> | 2562 | ··········</ocil:actions> |
| 2581 | ········</ocil:questionnaire> | 2563 | ········</ocil:questionnaire> |
| 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 2583 | ··········<ocil:title> | 2565 | ··········<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 2584 | ··········<ocil:actions> | 2566 | ··········<ocil:actions> |
| 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 2586 | ··········</ocil:actions> | 2568 | ··········</ocil:actions> |
| 2587 | ········</ocil:questionnaire> | 2569 | ········</ocil:questionnaire> |
| 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_check_cert_revocation_ocil:questionnaire:1"> |
| 2589 | ··········<ocil:title> | 2571 | ··········<ocil:title>Enable·Online·OCSP/CRL·Certificate·Checks</ocil:title> |
| 2590 | ··········<ocil:actions> | 2572 | ··········<ocil:actions> |
| 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_check_cert_revocation_action:testaction:1</ocil:test_action_ref> |
| 2592 | ··········</ocil:actions> | 2574 | ··········</ocil:actions> |
| 2593 | ········</ocil:questionnaire> | 2575 | ········</ocil:questionnaire> |
| 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> |
| 2595 | ··········<ocil:title> | 2577 | ··········<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> |
| 2596 | ··········<ocil:actions> | 2578 | ··········<ocil:actions> |
| 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> | ||
| 2580 | ··········</ocil:actions> | ||
| 2581 | ········</ocil:questionnaire> | ||
| 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> | ||
| 2583 | ··········<ocil:title>Disable·Incognito·Mode</ocil:title> | ||
| 2584 | ··········<ocil:actions> | ||
| 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 2598 | ··········</ocil:actions> | 2586 | ··········</ocil:actions> |
| 2599 | ········</ocil:questionnaire> | 2587 | ········</ocil:questionnaire> |
| 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> | 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 2601 | ··········<ocil:title>Enable·Only·Approved·Plugins</ocil:title> | 2589 | ··········<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 2602 | ··········<ocil:actions> | 2590 | ··········<ocil:actions> |
| 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> | 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 2604 | ··········</ocil:actions> | 2592 | ··········</ocil:actions> |
| 2605 | ········</ocil:questionnaire> | 2593 | ········</ocil:questionnaire> |
| 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_popups_ocil:questionnaire:1"> |
| 2607 | ··········<ocil:title>Disable· | 2595 | ··········<ocil:title>Disable·Popups</ocil:title> |
| Max diff block lines reached; 68088/78806 bytes (86.40%) of diff not shown. | |||
| Offset 3, 375 lines modified | Offset 3, 375 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·3rd·Party·Cookies</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_block_plugins_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Block·Plugins·by·Default</ocil:title> | ||
| 23 | ······<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cleartext_passwords_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Disable·Use·of·Cleartext·Passwords</ocil:title> | ||
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_block_plugins_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable·Background·Processing</ocil:title> | 17 | ······<ocil:title>Disable·Background·Processing</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 23 | ······<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 29 | ······<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_check_cert_revocation_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 35 | ······<ocil:title>Enable·Online·OCSP/CRL·Certificate·Checks</ocil:title> |
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_check_cert_revocation_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> |
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> | ||
| 44 | ······</ocil:actions> | ||
| 45 | ····</ocil:questionnaire> | ||
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> | ||
| 47 | ······<ocil:title>Disable·Incognito·Mode</ocil:title> | ||
| 48 | ······<ocil:actions> | ||
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> | 53 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_popups_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 59 | ······<ocil:title>Disable·Popups</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_popups_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·Session·Cookies</ocil:title> | 65 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> | ||
| 71 | ······<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> | ||
| 72 | ······<ocil:actions> | ||
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> | ||
| 74 | ······</ocil:actions> | ||
| 75 | ····</ocil:questionnaire> | ||
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_plugins_require_authorization_ocil:questionnaire:1"> | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_plugins_require_authorization_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Require·Outdated·Plugins·to·be·Authorized</ocil:title> | 77 | ······<ocil:title>Require·Outdated·Plugins·to·be·Authorized</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_plugins_require_authorization_action:testaction:1</ocil:test_action_ref> | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_plugins_require_authorization_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 83 | ······<ocil:title>Disable·Chromium·Password·Manager</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_trusted_home_page_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Set·the·Default·Home·Page</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_trusted_home_page_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_blacklist_extension_installation_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Disable·All·Extensions·by·Default</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_blacklist_extension_installation_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cloud_print_sharing_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 101 | ······<ocil:title>Disable·Cloud·Print·Sharing</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_cloud_print_sharing_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_p | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable· | 107 | ······<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> | ||
| 110 | ······</ocil:actions> | ||
| Max diff block lines reached; 59271/69889 bytes (84.81%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 1490, 15 lines modified | Offset 1490, 15 lines modified | ||
| 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1491 | ············</xccdf-1.2:check> | 1491 | ············</xccdf-1.2:check> |
| 1492 | ··········</xccdf-1.2:Rule> | 1492 | ··········</xccdf-1.2:Rule> |
| 1493 | ········</xccdf-1.2:Group> | 1493 | ········</xccdf-1.2:Group> |
| 1494 | ······</xccdf-1.2:Group> | 1494 | ······</xccdf-1.2:Group> |
| 1495 | ····</xccdf-1.2:Benchmark> | 1495 | ····</xccdf-1.2:Benchmark> |
| 1496 | ··</ds:component> | 1496 | ··</ds:component> |
| 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-0 | 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1499 | ······<oval-def:generator> | 1499 | ······<oval-def:generator> |
| 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 1502 | ········<oval:schema_version>5.11</oval:schema_version> | 1502 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1504 | ······</oval-def:generator> | 1504 | ······</oval-def:generator> |
| Offset 2111, 458 lines modified | Offset 2111, 458 lines modified | ||
| 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2114 | ········</oval-def:local_variable> | 2114 | ········</oval-def:local_variable> |
| 2115 | ······</oval-def:variables> | 2115 | ······</oval-def:variables> |
| 2116 | ····</oval-def:oval_definitions> | 2116 | ····</oval-def:oval_definitions> |
| 2117 | ··</ds:component> | 2117 | ··</ds:component> |
| 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-0 | 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2119 | ····<ocil:ocil> | 2119 | ····<ocil:ocil> |
| 2120 | ······<ocil:generator> | 2120 | ······<ocil:generator> |
| 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2125 | ······</ocil:generator> | 2125 | ······</ocil:generator> |
| 2126 | ······<ocil:questionnaires> | 2126 | ······<ocil:questionnaires> |
| 2127 | ········<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 2128 | ··········<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> | ||
| 2129 | ··········<ocil:actions> | ||
| 2130 | ············<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | ||
| 2131 | ··········</ocil:actions> | ||
| 2132 | ········</ocil:questionnaire> | ||
| 2127 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> | 2133 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> |
| 2128 | ··········<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | 2134 | ··········<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 2129 | ··········<ocil:actions> | 2135 | ··········<ocil:actions> |
| 2130 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> | 2136 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> |
| 2131 | ··········</ocil:actions> | 2137 | ··········</ocil:actions> |
| 2132 | ········</ocil:questionnaire> | 2138 | ········</ocil:questionnaire> |
| 2133 | ········<ocil:questionnaire·id="ocil:ssg- | 2139 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 2134 | ··········<ocil:title>Ensure· | 2140 | ··········<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> |
| 2135 | ··········<ocil:actions> | 2141 | ··········<ocil:actions> |
| 2136 | ············<ocil:test_action_ref>ocil:ssg- | 2142 | ············<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 2137 | ··········</ocil:actions> | 2143 | ··········</ocil:actions> |
| 2138 | ········</ocil:questionnaire> | 2144 | ········</ocil:questionnaire> |
| 2139 | ········<ocil:questionnaire·id="ocil:ssg- | 2145 | ········<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 2140 | ··········<ocil:title>Ensure· | 2146 | ··········<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 2141 | ··········<ocil:actions> | 2147 | ··········<ocil:actions> |
| 2142 | ············<ocil:test_action_ref>ocil:ssg- | 2148 | ············<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 2143 | ··········</ocil:actions> | 2149 | ··········</ocil:actions> |
| 2144 | ········</ocil:questionnaire> | 2150 | ········</ocil:questionnaire> |
| 2145 | ········<ocil:questionnaire·id="ocil:ssg- | 2151 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 2146 | ··········<ocil:title> | 2152 | ··········<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 2147 | ··········<ocil:actions> | 2153 | ··········<ocil:actions> |
| 2148 | ············<ocil:test_action_ref>ocil:ssg- | 2154 | ············<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 2149 | ··········</ocil:actions> | 2155 | ··········</ocil:actions> |
| 2150 | ········</ocil:questionnaire> | 2156 | ········</ocil:questionnaire> |
| 2151 | ········<ocil:questionnaire·id="ocil:ssg-a | 2157 | ········<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 2152 | ··········<ocil:title> | 2158 | ··········<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> |
| 2153 | ··········<ocil:actions> | 2159 | ··········<ocil:actions> |
| 2154 | ············<ocil:test_action_ref>ocil:ssg-a | 2160 | ············<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 2155 | ··········</ocil:actions> | 2161 | ··········</ocil:actions> |
| 2156 | ········</ocil:questionnaire> | 2162 | ········</ocil:questionnaire> |
| 2157 | ········<ocil:questionnaire·id="ocil:ssg- | 2163 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 2158 | ··········<ocil:title> | 2164 | ··········<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 2159 | ··········<ocil:actions> | 2165 | ··········<ocil:actions> |
| 2160 | ············<ocil:test_action_ref>ocil:ssg- | 2166 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 2161 | ··········</ocil:actions> | 2167 | ··········</ocil:actions> |
| 2162 | ········</ocil:questionnaire> | 2168 | ········</ocil:questionnaire> |
| 2163 | ········<ocil:questionnaire·id="ocil:ssg- | 2169 | ········<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 2164 | ··········<ocil:title> | 2170 | ··········<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 2165 | ··········<ocil:actions> | 2171 | ··········<ocil:actions> |
| 2166 | ············<ocil:test_action_ref>ocil:ssg- | 2172 | ············<ocil:test_action_ref>ocil:ssg-iam_integration_action:testaction:1</ocil:test_action_ref> |
| 2167 | ··········</ocil:actions> | 2173 | ··········</ocil:actions> |
| 2168 | ········</ocil:questionnaire> | 2174 | ········</ocil:questionnaire> |
| 2169 | ········<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> | ||
| 2170 | ········ | 2175 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 2176 | ··········<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 2171 | ··········<ocil:actions> | 2177 | ··········<ocil:actions> |
| 2172 | ············<ocil:test_action_ref>ocil:ssg- | 2178 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 2173 | ··········</ocil:actions> | 2179 | ··········</ocil:actions> |
| 2174 | ········</ocil:questionnaire> | 2180 | ········</ocil:questionnaire> |
| 2175 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> | ||
| 2176 | ········ | 2181 | ········<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> |
| 2182 | ··········<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| 2177 | ··········<ocil:actions> | 2183 | ··········<ocil:actions> |
| 2178 | ············<ocil:test_action_ref>ocil:ssg- | 2184 | ············<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 2179 | ··········</ocil:actions> | 2185 | ··········</ocil:actions> |
| Max diff block lines reached; 82265/93538 bytes (87.95%) of diff not shown. | |||
| Offset 3, 449 lines modified | Offset 3, 449 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> | 16 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | 17 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 12 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> | 19 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> | ||
| 17 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> | ||
| 18 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure· | 29 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 24 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 35 | ······<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 30 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-a | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> |
| 36 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-image_scanning_ocil:questionnaire:1"> | ||
| 41 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> | ||
| 42 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 53 | ······<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 48 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-iam_integration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> | ||
| 53 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 54 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> | ||
| 59 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| 60 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-re | 70 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·that·application·Namespaces·have·Network·Policies·defined.</ocil:title> |
| 66 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-re | 73 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_namespaces_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·Permissions·on· | 77 | ······<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> |
| 72 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-f | 82 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> |
| 78 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-f | 85 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-secret_encryption_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·Kubernetes·Secrets·are·Encrypted</ocil:title> |
| 84 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-secret_encryption_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>kubelet·-· | 95 | ······<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> |
| 90 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 101 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 96 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 107 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 102 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 113 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> |
| 108 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 119 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> |
| 114 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 124 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 125 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| Max diff block lines reached; 72541/84458 bytes (85.89%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 3479, 15 lines modified | Offset 3479, 15 lines modified | ||
| 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3480 | ············</xccdf-1.2:check> | 3480 | ············</xccdf-1.2:check> |
| 3481 | ··········</xccdf-1.2:Rule> | 3481 | ··········</xccdf-1.2:Rule> |
| 3482 | ········</xccdf-1.2:Group> | 3482 | ········</xccdf-1.2:Group> |
| 3483 | ······</xccdf-1.2:Group> | 3483 | ······</xccdf-1.2:Group> |
| 3484 | ····</xccdf-1.2:Benchmark> | 3484 | ····</xccdf-1.2:Benchmark> |
| 3485 | ··</ds:component> | 3485 | ··</ds:component> |
| 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-0 | 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3488 | ······<oval-def:generator> | 3488 | ······<oval-def:generator> |
| 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 3491 | ········<oval:schema_version>5.11</oval:schema_version> | 3491 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 3493 | ······</oval-def:generator> | 3493 | ······</oval-def:generator> |
| Offset 5189, 542 lines modified | Offset 5189, 507 lines modified | ||
| 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5190 | ············</oval-def:concat> | 5190 | ············</oval-def:concat> |
| 5191 | ··········</oval-def:unique> | 5191 | ··········</oval-def:unique> |
| 5192 | ········</oval-def:local_variable> | 5192 | ········</oval-def:local_variable> |
| 5193 | ······</oval-def:variables> | 5193 | ······</oval-def:variables> |
| 5194 | ····</oval-def:oval_definitions> | 5194 | ····</oval-def:oval_definitions> |
| 5195 | ··</ds:component> | 5195 | ··</ds:component> |
| 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-0 | 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 5197 | ····<ocil:ocil> | 5197 | ····<ocil:ocil> |
| 5198 | ······<ocil:generator> | 5198 | ······<ocil:generator> |
| 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 5203 | ······</ocil:generator> | 5203 | ······</ocil:generator> |
| 5204 | ······<ocil:questionnaires> | 5204 | ······<ocil:questionnaires> |
| 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 5206 | ··········<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> | ||
| 5206 | ··········<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> | ||
| 5207 | ··········<ocil:actions> | ||
| 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> | ||
| 5209 | ··········</ocil:actions> | ||
| 5210 | ········</ocil:questionnaire> | ||
| 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> | ||
| 5212 | ··········<ocil:title>Disable·Firefox·Telemetry</ocil:title> | ||
| 5213 | ··········<ocil:actions> | ||
| 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> | ||
| 5215 | ··········</ocil:actions> | ||
| 5216 | ········</ocil:questionnaire> | ||
| 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> | ||
| 5218 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> | ||
| 5219 | ··········<ocil:actions> | 5207 | ··········<ocil:actions> |
| 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 5221 | ··········</ocil:actions> | 5209 | ··········</ocil:actions> |
| 5222 | ········</ocil:questionnaire> | 5210 | ········</ocil:questionnaire> |
| 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 5224 | ··········<ocil:title>D | 5212 | ··········<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 5225 | ··········<ocil:actions> | 5213 | ··········<ocil:actions> |
| 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 5227 | ··········</ocil:actions> | 5215 | ··········</ocil:actions> |
| 5228 | ········</ocil:questionnaire> | 5216 | ········</ocil:questionnaire> |
| 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 5230 | ··········<ocil:title>Enable | 5218 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 5231 | ··········<ocil:actions> | 5219 | ··········<ocil:actions> |
| 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 5233 | ··········</ocil:actions> | 5221 | ··········</ocil:actions> |
| 5234 | ········</ocil:questionnaire> | 5222 | ········</ocil:questionnaire> |
| 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 5236 | ··········<ocil:title> | 5224 | ··········<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 5237 | ··········<ocil:actions> | 5225 | ··········<ocil:actions> |
| 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 5239 | ··········</ocil:actions> | 5227 | ··········</ocil:actions> |
| 5240 | ········</ocil:questionnaire> | 5228 | ········</ocil:questionnaire> |
| 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 5242 | ··········<ocil:title> | 5230 | ··········<ocil:title>Disable·Firefox·Studies</ocil:title> |
| 5243 | ··········<ocil:actions> | 5231 | ··········<ocil:actions> |
| 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 5245 | ··········</ocil:actions> | 5233 | ··········</ocil:actions> |
| 5246 | ········</ocil:questionnaire> | 5234 | ········</ocil:questionnaire> |
| 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 5248 | ··········<ocil:title> | 5236 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 5249 | ··········<ocil:actions> | 5237 | ··········<ocil:actions> |
| 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 5251 | ··········</ocil:actions> | 5239 | ··········</ocil:actions> |
| 5252 | ········</ocil:questionnaire> | 5240 | ········</ocil:questionnaire> |
| 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 5254 | ··········<ocil:title>Firefox· | 5242 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 5255 | ··········<ocil:actions> | 5243 | ··········<ocil:actions> |
| 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 5257 | ··········</ocil:actions> | 5245 | ··········</ocil:actions> |
| 5258 | ········</ocil:questionnaire> | 5246 | ········</ocil:questionnaire> |
| 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> |
| 5260 | ··········<ocil:title>Disable· | 5248 | ··········<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> |
| 5261 | ··········<ocil:actions> | 5249 | ··········<ocil:actions> |
| 5262 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> |
| 5263 | ··········</ocil:actions> | 5251 | ··········</ocil:actions> |
| 5264 | ········</ocil:questionnaire> | 5252 | ········</ocil:questionnaire> |
| 5265 | ········<ocil:questionnaire·id="ocil:ssg- | 5253 | ········<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 5266 | ··········<ocil:title> | 5254 | ··········<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 5267 | ··········<ocil:actions> | 5255 | ··········<ocil:actions> |
| 5268 | ············<ocil:test_action_ref>ocil:ssg- | 5256 | ············<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 5269 | ··········</ocil:actions> | 5257 | ··········</ocil:actions> |
| 5270 | ········</ocil:questionnaire> | 5258 | ········</ocil:questionnaire> |
| 5271 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> | 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 5272 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> | 5260 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> |
| Max diff block lines reached; 47158/58641 bytes (80.42%) of diff not shown. | |||
| Offset 3, 533 lines modified | Offset 3, 498 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> | ||
| 11 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>D | 17 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable | 23 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Disable·Firefox·Studies</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Firefox· | 47 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> | 65 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> | 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> | ||
| 89 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> | ||
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> | 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> | 95 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable· | 101 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>Disable· | 113 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 126 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| Max diff block lines reached; 39109/51197 bytes (76.39%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····2736·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····2736·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··2806 | 3 | -rw-r--r--···0········0········0··2806768·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 29696, 77 lines modified | Offset 29696, 77 lines modified | ||
| 00073ff0:·2d74·6172·6765·743d·2223·6964·6d31·3032··-target="#idm102 | 00073ff0:·2d74·6172·6765·743d·2223·6964·6d31·3032··-target="#idm102 | ||
| 00074000:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | 00074000:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | ||
| 00074010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00074010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00074020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00074020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00074030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00074030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00074040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00074040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00074050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00074050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00074060:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 00074070:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00074080:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00074090:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000740a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000740b0:·6964·3d22·6964·6d31·3032·3734·223e·3c70··id="idm10274"><p | |||
| 000740c0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 000740d0:·6167·6573·5d5d·0a6e·616d·6520·3d20·226e··ages]].name·=·"n | |||
| 000740e0:·7470·220a·7665·7273·696f·6e20·3d20·222a··tp".version·=·"* | |||
| 000740f0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00074060:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00074070:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00074080:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00074090:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000740a0:·6170·7365·2220·6964·3d22·6964·6d31·3032··apse"·id="idm102 | |||
| 000740b0:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 000740c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 000740d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000740e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 000740f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00074100:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00074110:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00074120:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00074130:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00074140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00074150:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00074160:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00074170:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00074180:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00074190:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 000741a0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 000741b0:·6d65·3a20·456e·7375·7265·206e·7470·2069··me:·Ensure·ntp·i | |||
| 000741c0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 000741d0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 000741e0:·206e·7470·0a20·2020·2073·7461·7465·3a20···ntp.····state:· | |||
| 000741f0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 00074200:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00074210:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00074220:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00074230:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00074240:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00074250:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00074260:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00074270:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 00074280:·532d·5265·712d·3130·2e34·0a20·202d·2065··S-Req-10.4.··-·e | |||
| 00074290:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 000742a0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | |||
| 000742b0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 000742c0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 000742d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | |||
| 000742e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 000742f0:·7061·636b·6167·655f·6e74·705f·696e·7374··package_ntp_inst | |||
| 00074300:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00074 | 00074100:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 00074 | 00074110:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 00074 | 00074120:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 00074 | 00074130:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 00074 | 00074140:·6574·3d22·2369·646d·3130·3237·3522·2074··et="#idm10275"·t | ||
| 00074 | 00074150:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00074 | 00074160:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00074 | 00074170:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00074 | 00074180:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00074 | 00074190:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 00074 | 000741a0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000741b0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 000743c0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 000743d0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00074 | 000741c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 00074 | 000741d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 00074 | 000741e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 00074 | 000741f0:·2069·643d·2269·646d·3130·3237·3522·3e3c···id="idm10275">< | ||
| 00074420:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00074430:·6765·735d·5d0a·6e61·6d65·203d·2022·6e74··ges]].name·=·"nt | |||
| 00074 | 00074200:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 00074210:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00074220:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00074230:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00074240:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00074250:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00074260:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00074270:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00074280:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00074290:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000742a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 000742b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000742c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 000742d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 000742e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 000742f0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 00074300:·6e73·7572·6520·6e74·7020·6973·2069·6e73··nsure·ntp·is·ins | |||
| 00074310:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 00074320:·3a0a·2020·2020·6e61·6d65·3a20·6e74·700a··:.····name:·ntp. | |||
| 00074330:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 00074340:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 00074350:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 00074360:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 00074370:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 00074380:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 00074390:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000743a0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 000743b0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 000743c0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 000743d0:·2d31·302e·340a·2020·2d20·656e·6162·6c65··-10.4.··-·enable | |||
| 000743e0:·5f73·7472·6174·6567·790a·2020·2d20·6869··_strategy.··-·hi | |||
| Max diff block lines reached; 414/10816 bytes (3.83%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3756, 14 lines modified | Offset 3756, 19 lines modified | ||
| 3756 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3756 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3757 | References:················4.4.2.4 | 3757 | References:················4.4.2.4 |
| 3758 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3758 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3759 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3759 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3760 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3760 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3761 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3761 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3762 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3762 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3763 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3764 | [[packages]] | ||
| 3765 | name·=·"ntp" | ||
| 3766 | version·=·"*" | ||
| 3763 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3767 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3764 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3768 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3765 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3769 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3766 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3770 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3767 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3771 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3768 | -·name:·Ensure·ntp·is·installed | 3772 | -·name:·Ensure·ntp·is·installed |
| 3769 | ··package: | 3773 | ··package: |
| Offset 3776, 19 lines modified | Offset 3781, 14 lines modified | ||
| 3776 | ··-·PCI-DSS-Req-10.4 | 3781 | ··-·PCI-DSS-Req-10.4 |
| 3777 | ··-·enable_strategy | 3782 | ··-·enable_strategy |
| 3778 | ··-·high_severity | 3783 | ··-·high_severity |
| 3779 | ··-·low_complexity | 3784 | ··-·low_complexity |
| 3780 | ··-·low_disruption | 3785 | ··-·low_disruption |
| 3781 | ··-·no_reboot_needed | 3786 | ··-·no_reboot_needed |
| 3782 | ··-·package_ntp_installed | 3787 | ··-·package_ntp_installed |
| 3783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3784 | [[packages]] | ||
| 3785 | name·=·"ntp" | ||
| 3786 | version·=·"*" | ||
| 3787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3788 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3788 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3789 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3789 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3790 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3790 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3791 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3791 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3792 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3792 | #·Remediation·is·applicable·only·in·certain·platforms | 3793 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3793 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3794 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 28355, 76 lines modified | Offset 28355, 76 lines modified | ||
| 0006ec20:·7267·6574·3d22·2369·646d·3933·3739·2220··rget="#idm9379"· | 0006ec20:·7267·6574·3d22·2369·646d·3933·3739·2220··rget="#idm9379"· | ||
| 0006ec30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0006ec30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0006ec40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0006ec40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0006ec50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0006ec50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0006ec60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0006ec60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0006ec70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0006ec70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0006ec80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0006ec80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0006ec90:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0006eca0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0006ecb0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0006ecc0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0006ecd0:·2220·6964·3d22·6964·6d39·3337·3922·3e3c··"·id="idm9379">< | |||
| 0006ece0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0006ecf0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0006ed00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0006ed10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0006ed20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0006ed30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0006ed40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006ed50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0006ed60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0006ed70:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0006ed80:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0006ed90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006e | 0006ec90:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0006eca0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0006ecb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0006ecc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0006ecd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0006ece0:·6964·6d39·3337·3922·3e3c·7072·653e·3c63··idm9379"><pre><c | |||
| 0006ecf0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0006ed00:·5d0a·6e61·6d65·203d·2022·6372·6f6e·220a··].name·=·"cron". | |||
| 0006ed10:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0006ed20:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0006ed30:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0006ed40:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0006ed50:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0006ed60:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0006ed70:·2369·646d·3933·3830·2220·7461·6269·6e64··#idm9380"·tabind | |||
| 0006ed80:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0006ed90:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0006eda0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0006edb0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0006edc0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0006edd0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0006ede0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0006edf0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0006ee00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0006ee10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0006ee20:·6964·6d39·3338·3022·3e3c·7461·626c·6520··idm9380"><table· | |||
| 0006ee30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0006ee40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0006ee50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0006ee60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0006ee70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0006ee80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0006ee90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0006eea0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0006eeb0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0006eec0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0006e | 0006eed0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0006eee0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0006eef0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0006ef00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0006ef10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0006ef20:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0006ef30:·6372·6f6e·2069·7320·696e·7374·616c·6c65··cron·is·installe | |||
| 0006ef40:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0006ef50:·206e·616d·653a·2063·726f·6e0a·2020·2020···name:·cron.···· | |||
| 0006ef60:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0006ef70:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0006ef80:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0006ef90:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0006efa0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0006efb0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0006efc0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0006efd0:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0006efe0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0006eff0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0006f000:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0006f010:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0006f020:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0006f030:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0006f040:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0006f050:·2020·2d20·7061·636b·6167·655f·6372·6f6e····-·package_cron | |||
| 0006f060:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0006edc0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0006edd0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0006ede0:·6e73·7572·6520·6372·6f6e·2069·7320·696e··nsure·cron·is·in | |||
| 0006edf0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0006ee00:·653a·0a20·2020·206e·616d·653a·2063·726f··e:.····name:·cro | |||
| 0006ee10:·6e0a·2020·2020·7374·6174·653a·2070·7265··n.····state:·pre | |||
| 0006ee20:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0006ee30:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0006ee40:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0006ee50:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0006ee60:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0006ee70:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0006ee80:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0006ee90:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0006eea0:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0006eeb0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0006eec0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0006eed0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0006eee0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0006eef0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0006ef00:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0006ef10:·655f·6372·6f6e·5f69·6e73·7461·6c6c·6564··e_cron_installed | |||
| 0006ef20:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0006ef30:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0006ef40:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| Max diff block lines reached; 73552/83816 bytes (87.75%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 3469, 14 lines modified | Offset 3469, 19 lines modified | ||
| 3469 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3469 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3470 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3470 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3471 | ···························SR·2.7,·SR·7.6 | 3471 | ···························SR·2.7,·SR·7.6 |
| 3472 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3472 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3473 | ···························A.14.2.4,·A.9.1.2 | 3473 | ···························A.14.2.4,·A.9.1.2 |
| 3474 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3474 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3475 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3475 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3477 | [[packages]] | ||
| 3478 | name·=·"cron" | ||
| 3479 | version·=·"*" | ||
| 3476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3481 | -·name:·Ensure·cron·is·installed | 3485 | -·name:·Ensure·cron·is·installed |
| 3482 | ··package: | 3486 | ··package: |
| Offset 3488, 19 lines modified | Offset 3493, 14 lines modified | ||
| 3488 | ··-·NIST-800-53-CM-6(a) | 3493 | ··-·NIST-800-53-CM-6(a) |
| 3489 | ··-·enable_strategy | 3494 | ··-·enable_strategy |
| 3490 | ··-·low_complexity | 3495 | ··-·low_complexity |
| 3491 | ··-·low_disruption | 3496 | ··-·low_disruption |
| 3492 | ··-·medium_severity | 3497 | ··-·medium_severity |
| 3493 | ··-·no_reboot_needed | 3498 | ··-·no_reboot_needed |
| 3494 | ··-·package_cron_installed | 3499 | ··-·package_cron_installed |
| 3495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3496 | [[packages]] | ||
| 3497 | name·=·"cron" | ||
| 3498 | version·=·"*" | ||
| 3499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3504 | #·Remediation·is·applicable·only·in·certain·platforms | 3505 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3505 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3506 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3898, 14 lines modified | Offset 3898, 19 lines modified | ||
| 3898 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3898 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3899 | References:················4.4.2.4 | 3899 | References:················4.4.2.4 |
| 3900 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3900 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3901 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3901 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3902 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3902 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3903 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3903 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3904 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3904 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3906 | [[packages]] | ||
| 3907 | name·=·"ntp" | ||
| 3908 | version·=·"*" | ||
| 3905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3909 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3910 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3911 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3912 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3913 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3910 | -·name:·Ensure·ntp·is·installed | 3914 | -·name:·Ensure·ntp·is·installed |
| 3911 | ··package: | 3915 | ··package: |
| Offset 3918, 19 lines modified | Offset 3923, 14 lines modified | ||
| 3918 | ··-·PCI-DSS-Req-10.4 | 3923 | ··-·PCI-DSS-Req-10.4 |
| 3919 | ··-·enable_strategy | 3924 | ··-·enable_strategy |
| 3920 | ··-·high_severity | 3925 | ··-·high_severity |
| 3921 | ··-·low_complexity | 3926 | ··-·low_complexity |
| 3922 | ··-·low_disruption | 3927 | ··-·low_disruption |
| 3923 | ··-·no_reboot_needed | 3928 | ··-·no_reboot_needed |
| 3924 | ··-·package_ntp_installed | 3929 | ··-·package_ntp_installed |
| 3925 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3926 | [[packages]] | ||
| 3927 | name·=·"ntp" | ||
| 3928 | version·=·"*" | ||
| 3929 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3930 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3930 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3931 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3931 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3932 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3932 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3933 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3933 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3934 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3934 | #·Remediation·is·applicable·only·in·certain·platforms | 3935 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3935 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3936 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3975, 14 lines modified | Offset 3975, 18 lines modified | ||
| 3975 | ···························4.4.2.4 | 3975 | ···························4.4.2.4 |
| 3976 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3976 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3977 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3977 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3978 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) | 3978 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) |
| 3979 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3979 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3980 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3980 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3981 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 | 3981 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 |
| 3982 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3983 | [customizations.services] | ||
| 3984 | enabled·=·["ntp"] | ||
| 3982 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3985 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3983 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3986 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3984 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3987 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3985 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3988 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3986 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3989 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3987 | -·name:·Gather·the·package·facts | 3990 | -·name:·Gather·the·package·facts |
| 3988 | ··package_facts: | 3991 | ··package_facts: |
| Offset 4025, 18 lines modified | Offset 4029, 14 lines modified | ||
| 4025 | ··-·PCI-DSSv4-10.6.1 | 4029 | ··-·PCI-DSSv4-10.6.1 |
| 4026 | ··-·enable_strategy | 4030 | ··-·enable_strategy |
| 4027 | ··-·high_severity | 4031 | ··-·high_severity |
| 4028 | ··-·low_complexity | 4032 | ··-·low_complexity |
| 4029 | ··-·low_disruption | 4033 | ··-·low_disruption |
| 4030 | ··-·no_reboot_needed | 4034 | ··-·no_reboot_needed |
| 4031 | ··-·service_ntp_enabled | 4035 | ··-·service_ntp_enabled |
| 4032 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4033 | [customizations.services] | ||
| 4034 | enabled·=·["ntp"] | ||
| 4035 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 4036 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 5195/11016 bytes (47.16%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 27977, 76 lines modified | Offset 27977, 76 lines modified | ||
| 0006d480:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | 0006d480:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | ||
| 0006d490:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | 0006d490:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | ||
| 0006d4a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0006d4a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0006d4b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0006d4b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0006d4c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0006d4c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0006d4d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0006d4d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0006d4e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0006d4e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0006d4f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0006d500:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0006d510:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0006d520:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0006d530:·6170·7365·2220·6964·3d22·6964·6d39·3337··apse"·id="idm937 | |||
| 0006d540:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0006d550:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0006d560:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0006d570:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0006d580:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0006d590:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0006d5a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006d5b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0006d5c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0006d5d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0006d5e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0006d5f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0006d600:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0006d | 0006d4f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0006d500:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0006d510:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0006d520:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0006d530:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0006d540:·6964·3d22·6964·6d39·3337·3922·3e3c·7072··id="idm9379"><pr | |||
| 0006d550:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0006d560:·6765·735d·5d0a·6e61·6d65·203d·2022·6372··ges]].name·=·"cr | |||
| 0006d570:·6f6e·220a·7665·7273·696f·6e20·3d20·222a··on".version·=·"* | |||
| 0006d580:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0006d590:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0006d5a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0006d5b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0006d5c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0006d5d0:·6574·3d22·2369·646d·3933·3830·2220·7461··et="#idm9380"·ta | |||
| 0006d5e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0006d5f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0006d600:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0006d610:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0006d620:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0006d630:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0006d640:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0006d650:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0006d660:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0006d670:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0006d680:·6964·3d22·6964·6d39·3338·3022·3e3c·7461··id="idm9380"><ta | |||
| 0006d690:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0006d6a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0006d6b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0006d6c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0006d6d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0006d6e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0006d6 | 0006d6f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0006d700:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0006d710:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0006d720:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0006d730:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0006d740:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0006d750:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0006d760:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0006d770:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0006d780:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0006d790:·7572·6520·6372·6f6e·2069·7320·696e·7374··ure·cron·is·inst | |||
| 0006d7a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0006d7b0:·0a20·2020·206e·616d·653a·2063·726f·6e0a··.····name:·cron. | |||
| 0006d7c0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0006d7d0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0006d7e0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0006d7f0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0006d800:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0006d810:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0006d820:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0006d830:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0006d840:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0006d850:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0006d860:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0006d870:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0006d880:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0006d890:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0006d8a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0006d8b0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0006d8c0:·6372·6f6e·5f69·6e73·7461·6c6c·6564·0a3c··cron_installed.< | |||
| 0006d630:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0006d640:·653a·2045·6e73·7572·6520·6372·6f6e·2069··e:·Ensure·cron·i | |||
| 0006d650:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0006d660:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0006d670:·2063·726f·6e0a·2020·2020·7374·6174·653a···cron.····state: | |||
| 0006d680:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0006d690:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0006d6a0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0006d6b0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0006d6c0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0006d6d0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0006d6e0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0006d6f0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0006d700:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 0006d710:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0006d720:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0006d730:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0006d740:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0006d750:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0006d760:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0006d770:·636b·6167·655f·6372·6f6e·5f69·6e73·7461··ckage_cron_insta | |||
| 0006d780:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0006d790:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0006d7a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| Max diff block lines reached; 73690/83954 bytes (87.77%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3410, 14 lines modified | Offset 3410, 19 lines modified | ||
| 3410 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3410 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3411 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3411 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3412 | ···························SR·2.7,·SR·7.6 | 3412 | ···························SR·2.7,·SR·7.6 |
| 3413 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3413 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3414 | ···························A.14.2.4,·A.9.1.2 | 3414 | ···························A.14.2.4,·A.9.1.2 |
| 3415 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3415 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3416 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3416 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3418 | [[packages]] | ||
| 3419 | name·=·"cron" | ||
| 3420 | version·=·"*" | ||
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3422 | -·name:·Ensure·cron·is·installed | 3426 | -·name:·Ensure·cron·is·installed |
| 3423 | ··package: | 3427 | ··package: |
| Offset 3429, 19 lines modified | Offset 3434, 14 lines modified | ||
| 3429 | ··-·NIST-800-53-CM-6(a) | 3434 | ··-·NIST-800-53-CM-6(a) |
| 3430 | ··-·enable_strategy | 3435 | ··-·enable_strategy |
| 3431 | ··-·low_complexity | 3436 | ··-·low_complexity |
| 3432 | ··-·low_disruption | 3437 | ··-·low_disruption |
| 3433 | ··-·medium_severity | 3438 | ··-·medium_severity |
| 3434 | ··-·no_reboot_needed | 3439 | ··-·no_reboot_needed |
| 3435 | ··-·package_cron_installed | 3440 | ··-·package_cron_installed |
| 3436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3437 | [[packages]] | ||
| 3438 | name·=·"cron" | ||
| 3439 | version·=·"*" | ||
| 3440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3445 | #·Remediation·is·applicable·only·in·certain·platforms | 3446 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3446 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3447 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3839, 14 lines modified | Offset 3839, 19 lines modified | ||
| 3839 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3839 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3840 | References:················4.4.2.4 | 3840 | References:················4.4.2.4 |
| 3841 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3841 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3842 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3842 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3843 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3843 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3844 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3844 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3845 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3845 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3847 | [[packages]] | ||
| 3848 | name·=·"ntp" | ||
| 3849 | version·=·"*" | ||
| 3846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3847 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3851 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3848 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3852 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3849 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3853 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3850 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3854 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3851 | -·name:·Ensure·ntp·is·installed | 3855 | -·name:·Ensure·ntp·is·installed |
| 3852 | ··package: | 3856 | ··package: |
| Offset 3859, 19 lines modified | Offset 3864, 14 lines modified | ||
| 3859 | ··-·PCI-DSS-Req-10.4 | 3864 | ··-·PCI-DSS-Req-10.4 |
| 3860 | ··-·enable_strategy | 3865 | ··-·enable_strategy |
| 3861 | ··-·high_severity | 3866 | ··-·high_severity |
| 3862 | ··-·low_complexity | 3867 | ··-·low_complexity |
| 3863 | ··-·low_disruption | 3868 | ··-·low_disruption |
| 3864 | ··-·no_reboot_needed | 3869 | ··-·no_reboot_needed |
| 3865 | ··-·package_ntp_installed | 3870 | ··-·package_ntp_installed |
| 3866 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3867 | [[packages]] | ||
| 3868 | name·=·"ntp" | ||
| 3869 | version·=·"*" | ||
| 3870 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3871 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3871 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3872 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3872 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3873 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3873 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3874 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3874 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3875 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3875 | #·Remediation·is·applicable·only·in·certain·platforms | 3876 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3876 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3877 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3916, 14 lines modified | Offset 3916, 18 lines modified | ||
| 3916 | ···························4.4.2.4 | 3916 | ···························4.4.2.4 |
| 3917 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3917 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3918 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3918 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3919 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) | 3919 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) |
| 3920 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3920 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3921 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3921 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3922 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 | 3922 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 |
| 3923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3924 | [customizations.services] | ||
| 3925 | enabled·=·["ntp"] | ||
| 3923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3926 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3924 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3927 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3925 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3928 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3926 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3929 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3927 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3930 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3928 | -·name:·Gather·the·package·facts | 3931 | -·name:·Gather·the·package·facts |
| 3929 | ··package_facts: | 3932 | ··package_facts: |
| Offset 3966, 18 lines modified | Offset 3970, 14 lines modified | ||
| 3966 | ··-·PCI-DSSv4-10.6.1 | 3970 | ··-·PCI-DSSv4-10.6.1 |
| 3967 | ··-·enable_strategy | 3971 | ··-·enable_strategy |
| 3968 | ··-·high_severity | 3972 | ··-·high_severity |
| 3969 | ··-·low_complexity | 3973 | ··-·low_complexity |
| 3970 | ··-·low_disruption | 3974 | ··-·low_disruption |
| 3971 | ··-·no_reboot_needed | 3975 | ··-·no_reboot_needed |
| 3972 | ··-·service_ntp_enabled | 3976 | ··-·service_ntp_enabled |
| 3973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3974 | [customizations.services] | ||
| 3975 | enabled·=·["ntp"] | ||
| 3976 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 5195/11004 bytes (47.21%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19700, 77 lines modified | Offset 19700, 77 lines modified | ||
| 0004cf30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004cf30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004cf40:·2369·646d·3437·3133·2220·7461·6269·6e64··#idm4713"·tabind | 0004cf40:·2369·646d·3437·3133·2220·7461·6269·6e64··#idm4713"·tabind | ||
| 0004cf50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0004cf50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0004cf60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0004cf60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0004cf70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0004cf70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0004cf80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0004cf80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0004cf90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0004cf90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0004cfa0:·5265·6d65·6469·6174·696f·6e20·4 | 0004cfa0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0004cfb0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0004cfc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004cfd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004cfe0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004cff0:·6964·6d34·3731·3322·3e3c·7461·626c·6520··idm4713"><table· | |||
| 0004d000:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004d010:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0004d020:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0004d030:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004d040:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004d050:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004d060:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004 | 0004cfb0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0004cfc0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004cfd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004cfe0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004cff0:·6170·7365·2220·6964·3d22·6964·6d34·3731··apse"·id="idm471 | |||
| 0004d000:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0004d010:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0004d020:·203d·2022·7273·7973·6c6f·6722·0a76·6572···=·"rsyslog".ver | |||
| 0004d030:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0004d040:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0004d050:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0004d060:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0004d070:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0004d080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0004d090:·6d34·3731·3422·2074·6162·696e·6465·783d··m4714"·tabindex= | |||
| 0004d0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004d0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004d0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004d0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004d0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004d0f0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0004d100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004d110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004d120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004d130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004d140:·3437·3134·223e·3c74·6162·6c65·2063·6c61··4714"><table·cla | |||
| 0004d150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0004d160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0004d170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0004d180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0004d190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0004d1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004d1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004d1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0004d1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004d1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0004d1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0004d200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0004d210:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0004d | 0004d220:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0004d230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0004d240:·6e61·6d65·3a20·456e·7375·7265·2072·7379··name:·Ensure·rsy | |||
| 0004d250:·736c·6f67·2069·7320·696e·7374·616c·6c65··slog·is·installe | |||
| 0004d260:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0004d270:·206e·616d·653a·2072·7379·736c·6f67·0a20···name:·rsyslog.· | |||
| 0004d280:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0004d290:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0004d2a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0004d2b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0004d2c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0004d2d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0004d2e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0004d2f0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | |||
| 0004d300:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0004d310:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0004d320:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0004d090:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004d0a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004d0b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004d0c0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004d0d0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004d0e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0004d0f0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0004d100:·7273·7973·6c6f·6720·6973·2069·6e73·7461··rsyslog·is·insta | |||
| 0004d110:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0004d120:·2020·2020·6e61·6d65·3a20·7273·7973·6c6f······name:·rsyslo | |||
| 0004d130:·670a·2020·2020·7374·6174·653a·2070·7265··g.····state:·pre | |||
| 0004d140:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0004d150:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0004d160:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0004d170:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0004d180:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0004d190:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0004d1a0:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0004d1b0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0004d1c0:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0004d | 0004d330:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | ||
| 0004d340:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0004d350:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0004d360:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0004d370:·6564·0a20·202d·2070·6163·6b61·6765·5f72··ed.··-·package_r | |||
| 0004d380:·7379·736c·6f67·5f69·6e73·7461·6c6c·6564··syslog_installed | |||
| 0004d1e0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004d1f0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004d200:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004d210:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004d220:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0004d230:·655f·7273·7973·6c6f·675f·696e·7374·616c··e_rsyslog_instal | |||
| 0004d240:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0004d250:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004d260:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| Max diff block lines reached; 107440/117842 bytes (91.17%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1544, 14 lines modified | Offset 1544, 19 lines modified | ||
| 1544 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1544 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1545 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1545 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1546 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1546 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1547 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1547 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1548 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1548 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1549 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1549 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1550 | ···························SRG-OS-000480-GPOS-00227 | 1550 | ···························SRG-OS-000480-GPOS-00227 |
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1552 | [[packages]] | ||
| 1553 | name·=·"rsyslog" | ||
| 1554 | version·=·"*" | ||
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1552 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1556 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1553 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1557 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1554 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1558 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1555 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1559 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1556 | -·name:·Ensure·rsyslog·is·installed | 1560 | -·name:·Ensure·rsyslog·is·installed |
| 1557 | ··package: | 1561 | ··package: |
| Offset 1563, 19 lines modified | Offset 1568, 14 lines modified | ||
| 1563 | ··-·NIST-800-53-CM-6(a) | 1568 | ··-·NIST-800-53-CM-6(a) |
| 1564 | ··-·enable_strategy | 1569 | ··-·enable_strategy |
| 1565 | ··-·low_complexity | 1570 | ··-·low_complexity |
| 1566 | ··-·low_disruption | 1571 | ··-·low_disruption |
| 1567 | ··-·medium_severity | 1572 | ··-·medium_severity |
| 1568 | ··-·no_reboot_needed | 1573 | ··-·no_reboot_needed |
| 1569 | ··-·package_rsyslog_installed | 1574 | ··-·package_rsyslog_installed |
| 1570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1571 | [[packages]] | ||
| 1572 | name·=·"rsyslog" | ||
| 1573 | version·=·"*" | ||
| 1574 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1575 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1576 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1577 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1578 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1579 | #·Remediation·is·applicable·only·in·certain·platforms | 1580 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1580 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1581 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1618, 14 lines modified | Offset 1618, 18 lines modified | ||
| 1618 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1618 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1619 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1619 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1620 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1620 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1621 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1621 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1622 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1622 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1623 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1623 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1624 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1624 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1626 | [customizations.services] | ||
| 1627 | enabled·=·["rsyslog"] | ||
| 1625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1630 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1633 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1631 | ··block: | 1634 | ··block: |
| Offset 1649, 18 lines modified | Offset 1653, 14 lines modified | ||
| 1649 | ··-·NIST-800-53-CM-6(a) | 1653 | ··-·NIST-800-53-CM-6(a) |
| 1650 | ··-·enable_strategy | 1654 | ··-·enable_strategy |
| 1651 | ··-·low_complexity | 1655 | ··-·low_complexity |
| 1652 | ··-·low_disruption | 1656 | ··-·low_disruption |
| 1653 | ··-·medium_severity | 1657 | ··-·medium_severity |
| 1654 | ··-·no_reboot_needed | 1658 | ··-·no_reboot_needed |
| 1655 | ··-·service_rsyslog_enabled | 1659 | ··-·service_rsyslog_enabled |
| 1656 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1657 | [customizations.services] | ||
| 1658 | enabled·=·["rsyslog"] | ||
| 1659 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1660 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1660 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1661 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1661 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1662 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1662 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1663 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1663 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1664 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1664 | #·Remediation·is·applicable·only·in·certain·platforms | 1665 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1665 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1666 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3374, 14 lines modified | Offset 3374, 19 lines modified | ||
| 3374 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3374 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3375 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3375 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3376 | ···························SR·2.7,·SR·7.6 | 3376 | ···························SR·2.7,·SR·7.6 |
| 3377 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3377 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3378 | ···························A.14.2.4,·A.9.1.2 | 3378 | ···························A.14.2.4,·A.9.1.2 |
| 3379 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3379 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3380 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3380 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3382 | [[packages]] | ||
| 3383 | name·=·"cron" | ||
| 3384 | version·=·"*" | ||
| 3381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3386 | -·name:·Ensure·cron·is·installed | 3390 | -·name:·Ensure·cron·is·installed |
| 3387 | ··package: | 3391 | ··package: |
| Offset 3393, 19 lines modified | Offset 3398, 14 lines modified | ||
| 3393 | ··-·NIST-800-53-CM-6(a) | 3398 | ··-·NIST-800-53-CM-6(a) |
| 3394 | ··-·enable_strategy | 3399 | ··-·enable_strategy |
| 3395 | ··-·low_complexity | 3400 | ··-·low_complexity |
| 3396 | ··-·low_disruption | 3401 | ··-·low_disruption |
| 3397 | ··-·medium_severity | 3402 | ··-·medium_severity |
| 3398 | ··-·no_reboot_needed | 3403 | ··-·no_reboot_needed |
| 3399 | ··-·package_cron_installed | 3404 | ··-·package_cron_installed |
| 3400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3401 | [[packages]] | ||
| 3402 | name·=·"cron" | ||
| 3403 | version·=·"*" | ||
| 3404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 10120/16068 bytes (62.98%) of diff not shown. | |||
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 29730, 78 lines modified | Offset 29730, 78 lines modified | ||
| 00074210:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00074210:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00074220:·6d31·3139·3237·2220·7461·6269·6e64·6578··m11927"·tabindex | 00074220:·6d31·3139·3237·2220·7461·6269·6e64·6578··m11927"·tabindex | ||
| 00074230:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00074230:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00074240:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00074240:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00074250:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00074250:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00074260:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00074260:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00074270:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00074270:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00074280:·6d65·6469·6174·696f·6e20·4 | 00074280:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00074290:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 000742a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000742b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000742c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000742d0:·7365·2220·6964·3d22·6964·6d31·3139·3237··se"·id="idm11927 | |||
| 000742e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 000742f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00074300:·3d20·226e·7470·220a·7665·7273·696f·6e20··=·"ntp".version· | |||
| 00074310:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 00074290:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 000742a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000742b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000742c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000742d0:·6d31·3139·3237·223e·3c74·6162·6c65·2063··m11927"><table·c | |||
| 000742e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000742f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00074300:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00074310:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00074320:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00074330:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00074340:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00074350:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00074360:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00074370:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00074380:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00074390:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 000743a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 000743b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 000743c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 000743d0:·2d20·6e61·6d65·3a20·456e·7375·7265·206e··-·name:·Ensure·n | |||
| 000743e0:·7470·2069·7320·696e·7374·616c·6c65·640a··tp·is·installed. | |||
| 000743f0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 00074400:·616d·653a·206e·7470·0a20·2020·2073·7461··ame:·ntp.····sta | |||
| 00074410:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00074420:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00074430:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00074440:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00074450:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00074460:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00074470:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00074480:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 00074490:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 000744a0:·492d·4453·532d·5265·712d·3130·2e34·0a20··I-DSS-Req-10.4.· | |||
| 000744b0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 000744c0:·6779·0a20·202d·2068·6967·685f·7365·7665··gy.··-·high_seve | |||
| 000744d0:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 000744e0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000744f0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| 00074500:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00074510:·2020·2d20·7061·636b·6167·655f·6e74·705f····-·package_ntp_ | |||
| 00074520:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 00074 | 00074320:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 00074 | 00074330:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 00074 | 00074340:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 00074 | 00074350:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 00074 | 00074360:·7461·7267·6574·3d22·2369·646d·3131·3932··target="#idm1192 | ||
| 00074 | 00074370:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 00074 | 00074380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00074 | 00074390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00074 | 000743a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00074 | 000743b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00074 | 000743c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 000743d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 000745e0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 000745f0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 00074 | 000743e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 00074 | 000743f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 00074 | 00074400:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 00074 | 00074410:·7073·6522·2069·643d·2269·646d·3131·3932··pse"·id="idm1192 | ||
| 00074640:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 00074650:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00074 | 00074420:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | ||
| 00074430:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00074440:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00074450:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00074460:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00074470:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00074480:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00074490:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 000744a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000744b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000744c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 000744d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 000744e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000744f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00074500:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00074510:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00074520:·653a·2045·6e73·7572·6520·6e74·7020·6973··e:·Ensure·ntp·is | |||
| 00074530:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00074540:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00074550:·6e74·700a·2020·2020·7374·6174·653a·2070··ntp.····state:·p | |||
| 00074560:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 00074570:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00074580:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00074590:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 000745a0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 000745b0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 000745c0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 000745d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 000745e0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 000745f0:·2d52·6571·2d31·302e·340a·2020·2d20·656e··-Req-10.4.··-·en | |||
| 00074600:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 00074610:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| Max diff block lines reached; 414/10954 bytes (3.78%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3761, 14 lines modified | Offset 3761, 19 lines modified | ||
| 3761 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3761 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3762 | References:················4.4.2.4 | 3762 | References:················4.4.2.4 |
| 3763 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3763 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3764 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3764 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3765 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3765 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3766 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3766 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3769 | [[packages]] | ||
| 3770 | name·=·"ntp" | ||
| 3771 | version·=·"*" | ||
| 3768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3772 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3769 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3773 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3770 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3774 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3771 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3775 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3772 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3776 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3773 | -·name:·Ensure·ntp·is·installed | 3777 | -·name:·Ensure·ntp·is·installed |
| 3774 | ··package: | 3778 | ··package: |
| Offset 3781, 19 lines modified | Offset 3786, 14 lines modified | ||
| 3781 | ··-·PCI-DSS-Req-10.4 | 3786 | ··-·PCI-DSS-Req-10.4 |
| 3782 | ··-·enable_strategy | 3787 | ··-·enable_strategy |
| 3783 | ··-·high_severity | 3788 | ··-·high_severity |
| 3784 | ··-·low_complexity | 3789 | ··-·low_complexity |
| 3785 | ··-·low_disruption | 3790 | ··-·low_disruption |
| 3786 | ··-·no_reboot_needed | 3791 | ··-·no_reboot_needed |
| 3787 | ··-·package_ntp_installed | 3792 | ··-·package_ntp_installed |
| 3788 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3789 | [[packages]] | ||
| 3790 | name·=·"ntp" | ||
| 3791 | version·=·"*" | ||
| 3792 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3793 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3793 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3794 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3794 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3795 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3795 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3796 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3796 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3797 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3797 | #·Remediation·is·applicable·only·in·certain·platforms | 3798 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3798 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3799 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 28387, 76 lines modified | Offset 28387, 76 lines modified | ||
| 0006ee20:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | 0006ee20:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | ||
| 0006ee30:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0006ee30:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0006ee40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0006ee40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0006ee50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0006ee50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0006ee60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0006ee60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0006ee70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0006ee70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0006ee80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0006ee80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0006ee90:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0006eea0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0006eeb0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0006eec0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0006eed0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0006eee0:·643d·2269·646d·3131·3033·3222·3e3c·7072··d="idm11032"><pr | |||
| 0006eef0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0006ef00:·6765·735d·5d0a·6e61·6d65·203d·2022·6372··ges]].name·=·"cr | |||
| 0006ef10:·6f6e·220a·7665·7273·696f·6e20·3d20·222a··on".version·=·"* | |||
| 0006ef20:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0006ef30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0006ef40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0006ef50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0006ef60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0006ef70:·6574·3d22·2369·646d·3131·3033·3322·2074··et="#idm11033"·t | |||
| 0006ef80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0006ef90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0006efa0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0006efb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0006efc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0006efd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0006e | 0006efe0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0006e | 0006eff0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0006eeb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0006 | 0006f000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0006f010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0006 | 0006f020:·2069·643d·2269·646d·3131·3033·3322·3e3c···id="idm11033">< | ||
| 0006 | 0006f030:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0006 | 0006f040:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0006 | 0006f050:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0006 | 0006f060:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0006 | 0006f070:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0006ef30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0006ef40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006ef50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0006ef60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0006ef70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0006 | 0006f080:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0006 | 0006f090:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0006f0a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0006f0b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0006f0c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0006f0d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0006f0e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006 | 0006f0f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0006 | 0006f100:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0006 | 0006f110:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0006 | 0006f120:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | ||
| 0006 | 0006f130:·6e73·7572·6520·6372·6f6e·2069·7320·696e··nsure·cron·is·in | ||
| 0006 | 0006f140:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | ||
| 0006f | 0006f150:·653a·0a20·2020·206e·616d·653a·2063·726f··e:.····name:·cro | ||
| 0006f | 0006f160:·6e0a·2020·2020·7374·6174·653a·2070·7265··n.····state:·pre | ||
| 0006f | 0006f170:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | ||
| 0006f | 0006f180:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 0006f | 0006f190:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 0006f | 0006f1a0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 0006f | 0006f1b0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 0006f | 0006f1c0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 0006f | 0006f1d0:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | ||
| 0006f | 0006f1e0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0006f | 0006f1f0:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | ||
| 0006f | 0006f200:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | ||
| 0006f | 0006f210:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | ||
| 0006f | 0006f220:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | ||
| 0006f | 0006f230:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | ||
| 0006f | 0006f240:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0006f | 0006f250:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | ||
| 0006f | 0006f260:·655f·6372·6f6e·5f69·6e73·7461·6c6c·6564··e_cron_installed | ||
| 0006f120:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0006f130:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0006f140:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0006f150:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0006f160:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0006f170:·6172·6765·743d·2223·6964·6d31·3130·3333··arget="#idm11033 | |||
| 0006f180:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0006f190:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0006f1a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0006f1b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0006f1c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0006f1d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0006f1e0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0006f1f0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0006f200:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0006f210:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0006f220:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0006f230:·3d22·6964·6d31·3130·3333·223e·3c70·7265··="idm11033"><pre | |||
| 0006f240:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0006f250:·6573·5d5d·0a6e·616d·6520·3d20·2263·726f··es]].name·=·"cro | |||
| 0006f260:·6e22·0a76·6572·7369·6f6e·203d·2022·2a22··n".version·=·"*" | |||
| 0006f270:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | 0006f270:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0006f280:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | 0006f280:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0006f290:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | 0006f290:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0006f2a0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | 0006f2a0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0006f2b0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0006f2b0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0006f2c0:·743d·2223·6964·6d31·3130·3334·2220·7461··t="#idm11034"·ta | 0006f2c0:·743d·2223·6964·6d31·3130·3334·2220·7461··t="#idm11034"·ta | ||
| 0006f2d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0006f2d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| Offset 30556, 78 lines modified | Offset 30556, 78 lines modified | ||
| 000775b0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 000775b0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 000775c0:·3932·3722·2074·6162·696e·6465·783d·2230··927"·tabindex="0 | 000775c0:·3932·3722·2074·6162·696e·6465·783d·2230··927"·tabindex="0 | ||
| 000775d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 000775d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 000775e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 000775e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 000775f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 000775f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00077600:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00077600:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00077610:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00077610:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| Max diff block lines reached; 63728/83816 bytes (76.03%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 3474, 14 lines modified | Offset 3474, 19 lines modified | ||
| 3474 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3474 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3475 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3475 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3476 | ···························SR·2.7,·SR·7.6 | 3476 | ···························SR·2.7,·SR·7.6 |
| 3477 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3477 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3478 | ···························A.14.2.4,·A.9.1.2 | 3478 | ···························A.14.2.4,·A.9.1.2 |
| 3479 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3479 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3480 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3480 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3482 | [[packages]] | ||
| 3483 | name·=·"cron" | ||
| 3484 | version·=·"*" | ||
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3486 | -·name:·Ensure·cron·is·installed | 3490 | -·name:·Ensure·cron·is·installed |
| 3487 | ··package: | 3491 | ··package: |
| Offset 3493, 19 lines modified | Offset 3498, 14 lines modified | ||
| 3493 | ··-·NIST-800-53-CM-6(a) | 3498 | ··-·NIST-800-53-CM-6(a) |
| 3494 | ··-·enable_strategy | 3499 | ··-·enable_strategy |
| 3495 | ··-·low_complexity | 3500 | ··-·low_complexity |
| 3496 | ··-·low_disruption | 3501 | ··-·low_disruption |
| 3497 | ··-·medium_severity | 3502 | ··-·medium_severity |
| 3498 | ··-·no_reboot_needed | 3503 | ··-·no_reboot_needed |
| 3499 | ··-·package_cron_installed | 3504 | ··-·package_cron_installed |
| 3500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3501 | [[packages]] | ||
| 3502 | name·=·"cron" | ||
| 3503 | version·=·"*" | ||
| 3504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3509 | #·Remediation·is·applicable·only·in·certain·platforms | 3510 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3510 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3511 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3903, 14 lines modified | Offset 3903, 19 lines modified | ||
| 3903 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3903 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3904 | References:················4.4.2.4 | 3904 | References:················4.4.2.4 |
| 3905 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3905 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3906 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3906 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3907 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3907 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3908 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3908 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3911 | [[packages]] | ||
| 3912 | name·=·"ntp" | ||
| 3913 | version·=·"*" | ||
| 3910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3914 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3911 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3915 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3912 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3916 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3913 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3917 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3914 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3918 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3915 | -·name:·Ensure·ntp·is·installed | 3919 | -·name:·Ensure·ntp·is·installed |
| 3916 | ··package: | 3920 | ··package: |
| Offset 3923, 19 lines modified | Offset 3928, 14 lines modified | ||
| 3923 | ··-·PCI-DSS-Req-10.4 | 3928 | ··-·PCI-DSS-Req-10.4 |
| 3924 | ··-·enable_strategy | 3929 | ··-·enable_strategy |
| 3925 | ··-·high_severity | 3930 | ··-·high_severity |
| 3926 | ··-·low_complexity | 3931 | ··-·low_complexity |
| 3927 | ··-·low_disruption | 3932 | ··-·low_disruption |
| 3928 | ··-·no_reboot_needed | 3933 | ··-·no_reboot_needed |
| 3929 | ··-·package_ntp_installed | 3934 | ··-·package_ntp_installed |
| 3930 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3931 | [[packages]] | ||
| 3932 | name·=·"ntp" | ||
| 3933 | version·=·"*" | ||
| 3934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3935 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3935 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3936 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3936 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3937 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3937 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3938 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3938 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3939 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3939 | #·Remediation·is·applicable·only·in·certain·platforms | 3940 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3940 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3941 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3980, 14 lines modified | Offset 3980, 18 lines modified | ||
| 3980 | ···························4.4.2.4 | 3980 | ···························4.4.2.4 |
| 3981 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3981 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3982 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3982 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3983 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) | 3983 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) |
| 3984 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3984 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3985 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3985 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3986 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 | 3986 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 |
| 3987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3988 | [customizations.services] | ||
| 3989 | enabled·=·["ntp"] | ||
| 3987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3990 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3988 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3991 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3989 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3992 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3990 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3993 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3991 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3994 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3992 | -·name:·Gather·the·package·facts | 3995 | -·name:·Gather·the·package·facts |
| 3993 | ··package_facts: | 3996 | ··package_facts: |
| Offset 4030, 18 lines modified | Offset 4034, 14 lines modified | ||
| 4030 | ··-·PCI-DSSv4-10.6.1 | 4034 | ··-·PCI-DSSv4-10.6.1 |
| 4031 | ··-·enable_strategy | 4035 | ··-·enable_strategy |
| 4032 | ··-·high_severity | 4036 | ··-·high_severity |
| 4033 | ··-·low_complexity | 4037 | ··-·low_complexity |
| 4034 | ··-·low_disruption | 4038 | ··-·low_disruption |
| 4035 | ··-·no_reboot_needed | 4039 | ··-·no_reboot_needed |
| 4036 | ··-·service_ntp_enabled | 4040 | ··-·service_ntp_enabled |
| 4037 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4038 | [customizations.services] | ||
| 4039 | enabled·=·["ntp"] | ||
| 4040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 4041 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 5195/11016 bytes (47.16%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 28009, 77 lines modified | Offset 28009, 77 lines modified | ||
| 0006d680:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0006d680:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0006d690:·3131·3033·3222·2074·6162·696e·6465·783d··11032"·tabindex= | 0006d690:·3131·3033·3222·2074·6162·696e·6465·783d··11032"·tabindex= | ||
| 0006d6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0006d6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0006d6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0006d6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0006d6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0006d6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0006d6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0006d6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0006d6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0006d6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0006d6f0:·6564·6961·7469·6f6e·204 | 0006d6f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0006d700:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0006d710:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0006d720:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0006d730:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0006d740:·6522·2069·643d·2269·646d·3131·3033·3222··e"·id="idm11032" | |||
| 0006d750:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0006d760:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0006d770:·2022·6372·6f6e·220a·7665·7273·696f·6e20···"cron".version· | |||
| 0006d780:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0006d790:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0006d7a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0006d7b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0006d7c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0006d7d0:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | |||
| 0006d7e0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0006d7f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0006d800:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0006d810:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0006d820:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0006d830:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0006d840:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0006d | 0006d850:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0006d | 0006d860:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0006d | 0006d870:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0006d | 0006d880:·7073·6522·2069·643d·2269·646d·3131·3033··pse"·id="idm1103 | ||
| 0006d | 0006d890:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 0006d | 0006d8a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0006d | 0006d8b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0006d | 0006d8c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0006d | 0006d8d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0006d | 0006d8e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0006d | 0006d8f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0006d | 0006d900:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0006d | 0006d910:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0006d | 0006d920:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0006d | 0006d930:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0006d7f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0006d800:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0006d810:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0006d | 0006d940:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0006d950:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0006d960:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0006d970:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0006d830:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0006d840:·206e·616d·653a·2045·6e73·7572·6520·6372···name:·Ensure·cr | |||
| 0006d850:·6f6e·2069·7320·696e·7374·616c·6c65·640a··on·is·installed. | |||
| 0006d860:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0006d870:·616d·653a·2063·726f·6e0a·2020·2020·7374··ame:·cron.····st | |||
| 0006d880:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0006d890:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0006d8a0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0006d8b0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0006d8c0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0006d8d0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0006d8e0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0006d8f0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 0006d900:·3533·2d43·4d2d·3628·6129·0a20·202d·2065··53-CM-6(a).··-·e | |||
| 0006d910:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0006d920:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0006d930:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0006d940:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0006d950:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0006d960:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0006d970:·2d20·7061·636b·6167·655f·6372·6f6e·5f69··-·package_cron_i | |||
| 0006d980:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0006d990:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0006d9a0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0006d9b0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0006d9c0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0006d9d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0006d9e0:·3130·3333·2220·7461·6269·6e64·6578·3d22··1033"·tabindex=" | |||
| 0006d9f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0006da00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0006da10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0006da20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0006da30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0006da40:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0006da50:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0006da60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0006da70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0006da80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0006da90:·2220·6964·3d22·6964·6d31·3130·3333·223e··"·id="idm11033"> | |||
| 0006d | 0006d980:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0006dab0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0006d | 0006d990:·653a·2045·6e73·7572·6520·6372·6f6e·2069··e:·Ensure·cron·i | ||
| 0006d9a0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0006d9b0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0006d9c0:·2063·726f·6e0a·2020·2020·7374·6174·653a···cron.····state: | |||
| 0006d9d0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0006d9e0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0006d9f0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0006da00:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0006da10:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0006da20:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0006da30:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0006da40:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0006da50:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 0006da60:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0006da70:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0006da80:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0006da90:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0006daa0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0006dab0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| Max diff block lines reached; 73552/83954 bytes (87.61%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3415, 14 lines modified | Offset 3415, 19 lines modified | ||
| 3415 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3415 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3416 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3416 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3417 | ···························SR·2.7,·SR·7.6 | 3417 | ···························SR·2.7,·SR·7.6 |
| 3418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3419 | ···························A.14.2.4,·A.9.1.2 | 3419 | ···························A.14.2.4,·A.9.1.2 |
| 3420 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3420 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3423 | [[packages]] | ||
| 3424 | name·=·"cron" | ||
| 3425 | version·=·"*" | ||
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3427 | -·name:·Ensure·cron·is·installed | 3431 | -·name:·Ensure·cron·is·installed |
| 3428 | ··package: | 3432 | ··package: |
| Offset 3434, 19 lines modified | Offset 3439, 14 lines modified | ||
| 3434 | ··-·NIST-800-53-CM-6(a) | 3439 | ··-·NIST-800-53-CM-6(a) |
| 3435 | ··-·enable_strategy | 3440 | ··-·enable_strategy |
| 3436 | ··-·low_complexity | 3441 | ··-·low_complexity |
| 3437 | ··-·low_disruption | 3442 | ··-·low_disruption |
| 3438 | ··-·medium_severity | 3443 | ··-·medium_severity |
| 3439 | ··-·no_reboot_needed | 3444 | ··-·no_reboot_needed |
| 3440 | ··-·package_cron_installed | 3445 | ··-·package_cron_installed |
| 3441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3442 | [[packages]] | ||
| 3443 | name·=·"cron" | ||
| 3444 | version·=·"*" | ||
| 3445 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3446 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3447 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3448 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3449 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3450 | #·Remediation·is·applicable·only·in·certain·platforms | 3451 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3451 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3452 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3844, 14 lines modified | Offset 3844, 19 lines modified | ||
| 3844 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 3844 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 3845 | References:················4.4.2.4 | 3845 | References:················4.4.2.4 |
| 3846 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3846 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3847 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3847 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3848 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3848 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3849 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3849 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3850 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3850 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3852 | [[packages]] | ||
| 3853 | name·=·"ntp" | ||
| 3854 | version·=·"*" | ||
| 3851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3852 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3856 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3853 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3857 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3854 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3858 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3855 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3859 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3856 | -·name:·Ensure·ntp·is·installed | 3860 | -·name:·Ensure·ntp·is·installed |
| 3857 | ··package: | 3861 | ··package: |
| Offset 3864, 19 lines modified | Offset 3869, 14 lines modified | ||
| 3864 | ··-·PCI-DSS-Req-10.4 | 3869 | ··-·PCI-DSS-Req-10.4 |
| 3865 | ··-·enable_strategy | 3870 | ··-·enable_strategy |
| 3866 | ··-·high_severity | 3871 | ··-·high_severity |
| 3867 | ··-·low_complexity | 3872 | ··-·low_complexity |
| 3868 | ··-·low_disruption | 3873 | ··-·low_disruption |
| 3869 | ··-·no_reboot_needed | 3874 | ··-·no_reboot_needed |
| 3870 | ··-·package_ntp_installed | 3875 | ··-·package_ntp_installed |
| 3871 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3872 | [[packages]] | ||
| 3873 | name·=·"ntp" | ||
| 3874 | version·=·"*" | ||
| 3875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3876 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3877 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3878 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3879 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3880 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3880 | #·Remediation·is·applicable·only·in·certain·platforms | 3881 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3881 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3882 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3921, 14 lines modified | Offset 3921, 18 lines modified | ||
| 3921 | ···························4.4.2.4 | 3921 | ···························4.4.2.4 |
| 3922 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 3922 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 3923 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3923 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3924 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) | 3924 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-8(1)(a) |
| 3925 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3925 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3926 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 | 3926 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.4 |
| 3927 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 | 3927 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.6.1 |
| 3928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3929 | [customizations.services] | ||
| 3930 | enabled·=·["ntp"] | ||
| 3928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3931 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3929 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3932 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3930 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3933 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3931 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3934 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3932 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3935 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3933 | -·name:·Gather·the·package·facts | 3936 | -·name:·Gather·the·package·facts |
| 3934 | ··package_facts: | 3937 | ··package_facts: |
| Offset 3971, 18 lines modified | Offset 3975, 14 lines modified | ||
| 3971 | ··-·PCI-DSSv4-10.6.1 | 3975 | ··-·PCI-DSSv4-10.6.1 |
| 3972 | ··-·enable_strategy | 3976 | ··-·enable_strategy |
| 3973 | ··-·high_severity | 3977 | ··-·high_severity |
| 3974 | ··-·low_complexity | 3978 | ··-·low_complexity |
| 3975 | ··-·low_disruption | 3979 | ··-·low_disruption |
| 3976 | ··-·no_reboot_needed | 3980 | ··-·no_reboot_needed |
| 3977 | ··-·service_ntp_enabled | 3981 | ··-·service_ntp_enabled |
| 3978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3979 | [customizations.services] | ||
| 3980 | enabled·=·["ntp"] | ||
| 3981 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3982 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 5195/11004 bytes (47.21%) of diff not shown. | |||
| Offset 14282, 16 lines modified | Offset 14282, 16 lines modified | ||
| 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d00:·2028·6173·206f·6620·3230·323 | 00037d00:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037d10:·3 | 00037d10:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 51394, 151 lines modified | Offset 51394, 151 lines modified | ||
| 000c8c10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 000c8c10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 000c8c20:·3135·3130·3222·2074·6162·696e·6465·783d··15102"·tabindex= | 000c8c20:·3135·3130·3222·2074·6162·696e·6465·783d··15102"·tabindex= | ||
| 000c8c30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 000c8c30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 000c8c40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 000c8c40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 000c8c50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 000c8c50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 000c8c60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 000c8c60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 000c8c70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 000c8c70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 000c8c80:·6564·6961·7469·6f6e·204 | 000c8c80:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 000c8c90:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 000c8ca0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000c8cb0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000c8cc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000c8cd0:·6522·2069·643d·2269·646d·3135·3130·3222··e"·id="idm15102" | |||
| 000c8ce0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 000c8cf0:·7374·6f6d·697a·6174·696f·6e73·2e73·6572··stomizations.ser | |||
| 000c8d00:·7669·6365·735d·0a65·6e61·626c·6564·203d··vices].enabled·= | |||
| 000c8d10:·205b·2261·7564·6974·6422·5d0a·3c2f·636f···["auditd"].</co | |||
| 000c8c90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000c8ca0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000c8cb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000c8cc0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000c8cd0:·3135·3130·3222·3e3c·7461·626c·6520·636c··15102"><table·cl | |||
| 000c8ce0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000c8cf0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000c8d00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000c8d10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000c8d20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000c8d30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000c8d40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000c8d50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 000c8d60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000c8d70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000c8d80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000c8d90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 000c8da0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000c8db0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 000c8dc0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 000c8dd0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 000c8de0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 000c8df0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 000c8e00:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 000c8e10:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 000c8e20:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | |||
| 000c8e30:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | |||
| 000c8e40:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 000c8e50:·3137·312d·332e·332e·320a·2020·2d20·4e49··171-3.3.2.··-·NI | |||
| 000c8e60:·5354·2d38·3030·2d31·3731·2d33·2e33·2e36··ST-800-171-3.3.6 | |||
| 000c8e70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000c8e80:·2d41·432d·3228·6729·0a20·202d·204e·4953··-AC-2(g).··-·NIS | |||
| 000c8e90:·542d·3830·302d·3533·2d41·432d·3628·3929··T-800-53-AC-6(9) | |||
| 000c8ea0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000c8eb0:·2d41·552d·3130·0a20·202d·204e·4953·542d··-AU-10.··-·NIST- | |||
| 000c8ec0:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | |||
| 000c8ed0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 000c8ee0:·4155·2d31·3428·3129·0a20·202d·204e·4953··AU-14(1).··-·NIS | |||
| 000c8ef0:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | |||
| 000c8f00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000c8f10:·2d41·552d·330a·2020·2d20·4e49·5354·2d38··-AU-3.··-·NIST-8 | |||
| 000c8f20:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 000c8f30:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 000c8f40:·2d34·2832·3329·0a20·202d·2050·4349·2d44··-4(23).··-·PCI-D | |||
| 000c8f50:·5353·2d52·6571·2d31·302e·310a·2020·2d20··SS-Req-10.1.··-· | |||
| 000c8f60:·5043·492d·4453·5376·342d·3130·2e32·2e31··PCI-DSSv4-10.2.1 | |||
| 000c8f70:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000c8f80:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000c8f90:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000c8fa0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000c8fb0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000c8fc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 000c8fd0:·6465·640a·2020·2d20·7365·7276·6963·655f··ded.··-·service_ | |||
| 000c8fe0:·6175·6469·7464·5f65·6e61·626c·6564·0a0a··auditd_enabled.. | |||
| 000c8ff0:·2d20·6e61·6d65·3a20·456e·6162·6c65·2061··-·name:·Enable·a | |||
| 000c9000:·7564·6974·6420·5365·7276·6963·6520·2d20··uditd·Service·-· | |||
| 000c9010:·456e·6162·6c65·2073·6572·7669·6365·2061··Enable·service·a | |||
| 000c9020:·7564·6974·640a·2020·626c·6f63·6b3a·0a0a··uditd.··block:.. | |||
| 000c9030:·2020·2d20·6e61·6d65·3a20·4761·7468·6572····-·name:·Gather | |||
| 000c9040:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 000c9050:·7473·0a20·2020·2070·6163·6b61·6765·5f66··ts.····package_f | |||
| 000c9060:·6163·7473·3a0a·2020·2020·2020·6d61·6e61··acts:.······mana | |||
| 000c9070:·6765·723a·2061·7574·6f0a·0a20·202d·206e··ger:·auto..··-·n | |||
| 000c9080:·616d·653a·2045·6e61·626c·6520·6175·6469··ame:·Enable·audi | |||
| 000c9090:·7464·2053·6572·7669·6365·202d·2045·6e61··td·Service·-·Ena | |||
| 000c90a0:·626c·6520·5365·7276·6963·6520·6175·6469··ble·Service·audi | |||
| 000c90b0:·7464·0a20·2020·2061·6e73·6962·6c65·2e62··td.····ansible.b | |||
| 000c90c0:·7569·6c74·696e·2e73·7973·7465·6d64·3a0a··uiltin.systemd:. | |||
| 000c90d0:·2020·2020·2020·6e61·6d65·3a20·6175·6469········name:·audi | |||
| 000c90e0:·7464·0a20·2020·2020·2065·6e61·626c·6564··td.······enabled | |||
| 000c90f0:·3a20·7472·7565·0a20·2020·2020·2073·7461··:·true.······sta | |||
| 000c9100:·7465·3a20·7374·6172·7465·640a·2020·2020··te:·started.···· | |||
| 000c9110:·2020·6d61·736b·6564·3a20·6661·6c73·650a····masked:·false. | |||
| 000c9120:·2020·2020·7768·656e·3a0a·2020·2020·2d20······when:.····-· | |||
| 000c9130:·2722·6175·6469·7464·2220·696e·2061·6e73··'"auditd"·in·ans | |||
| 000c9140:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 000c9150:·6765·7327·0a20·2077·6865·6e3a·0a20·202d··ges'.··when:.··- | |||
| 000c9160:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000c9170:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000c9180:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000c9190:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000c91a0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000c91b0:·696e·6572·225d·0a20·202d·2027·2261·7564··iner"].··-·'"aud | |||
| 000c91c0:·6974·6422·2069·6e20·616e·7369·626c·655f··itd"·in·ansible_ | |||
| 000c91d0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000c91e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 000c91f0:·2d35·2e34·2e31·2e31·0a20·202d·204e·4953··-5.4.1.1.··-·NIS | |||
| 000c9200:·542d·3830·302d·3137·312d·332e·332e·310a··T-800-171-3.3.1. | |||
| 000c9210:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 000c9220:·2d33·2e33·2e32·0a20·202d·204e·4953·542d··-3.3.2.··-·NIST- | |||
| 000c9230:·3830·302d·3137·312d·332e·332e·360a·2020··800-171-3.3.6.·· | |||
| 000c9240:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 000c9250:·2d32·2867·290a·2020·2d20·4e49·5354·2d38··-2(g).··-·NIST-8 | |||
| Max diff block lines reached; 414/21168 bytes (1.96%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 9161, 14 lines modified | Offset 9161, 18 lines modified | ||
| 9161 | ···························00139,·SRG-OS-000352-GPOS-00140,·SRG-OS-000353-GPOS-00141,·SRG- | 9161 | ···························00139,·SRG-OS-000352-GPOS-00140,·SRG-OS-000353-GPOS-00141,·SRG- |
| 9162 | ···························OS-000354-GPOS-00142,·SRG-OS-000358-GPOS-00145,·SRG-OS-000365- | 9162 | ···························OS-000354-GPOS-00142,·SRG-OS-000358-GPOS-00145,·SRG-OS-000365- |
| 9163 | ···························GPOS-00152,·SRG-OS-000392-GPOS-00172,·SRG-OS-000475-GPOS-00220 | 9163 | ···························GPOS-00152,·SRG-OS-000392-GPOS-00172,·SRG-OS-000475-GPOS-00220 |
| 9164 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000095-CTR-000170,·SRG-APP-000409-CTR-000990,·SRG-APP- | 9164 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000095-CTR-000170,·SRG-APP-000409-CTR-000990,·SRG-APP- |
| 9165 | ···························000508-CTR-001300,·SRG-APP-000510-CTR-001310 | 9165 | ···························000508-CTR-001300,·SRG-APP-000510-CTR-001310 |
| 9166 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R33,·R73 | 9166 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R33,·R73 |
| 9167 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1 | 9167 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1 |
| 9168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9169 | [customizations.services] | ||
| 9170 | enabled·=·["auditd"] | ||
| 9168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9173 | -·name:·Gather·the·package·facts | 9176 | -·name:·Gather·the·package·facts |
| 9174 | ··package_facts: | 9177 | ··package_facts: |
| Offset 9232, 18 lines modified | Offset 9236, 14 lines modified | ||
| 9232 | ··-·PCI-DSSv4-10.2.1 | 9236 | ··-·PCI-DSSv4-10.2.1 |
| 9233 | ··-·enable_strategy | 9237 | ··-·enable_strategy |
| 9234 | ··-·low_complexity | 9238 | ··-·low_complexity |
| 9235 | ··-·low_disruption | 9239 | ··-·low_disruption |
| 9236 | ··-·medium_severity | 9240 | ··-·medium_severity |
| 9237 | ··-·no_reboot_needed | 9241 | ··-·no_reboot_needed |
| 9238 | ··-·service_auditd_enabled | 9242 | ··-·service_auditd_enabled |
| 9239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9240 | [customizations.services] | ||
| 9241 | enabled·=·["auditd"] | ||
| 9242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9247 | #·Remediation·is·applicable·only·in·certain·platforms | 9248 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9248 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·-- | 9249 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·-- |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19732, 77 lines modified | Offset 19732, 77 lines modified | ||
| 0004d130:·7267·6574·3d22·2369·646d·3439·3336·2220··rget="#idm4936"· | 0004d130:·7267·6574·3d22·2369·646d·3439·3336·2220··rget="#idm4936"· | ||
| 0004d140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004d140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004d150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004d150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004d160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004d160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004d170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004d170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004d180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004d180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004d190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004d190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004d1a0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0004d1b0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0004d1c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004d1d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004d1e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004d1f0:·6964·6d34·3933·3622·3e3c·7072·653e·3c63··idm4936"><pre><c | |||
| 0004d200:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0004d210:·5d0a·6e61·6d65·203d·2022·7273·7973·6c6f··].name·=·"rsyslo | |||
| 0004d220:·6722·0a76·6572·7369·6f6e·203d·2022·2a22··g".version·=·"*" | |||
| 0004d230:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0004d240:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0004d250:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0004d260:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0004d270:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0004d280:·743d·2223·6964·6d34·3933·3722·2074·6162··t="#idm4937"·tab | |||
| 0004d290:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0004d2a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0004d2b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0004d2c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0004d2d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0004d2e0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0004d2f0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0004d300:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004d310:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004d1a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0004d1b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004d1c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004d1d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004d1e0:·2220·6964·3d22·6964·6d34·3933·3622·3e3c··"·id="idm4936">< | |||
| 0004d1f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0004d200:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0004d210:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0004d220:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0004d230:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0004d240:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0004d250:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004d260:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004d270:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004d280:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004d290:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0004d2a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004d2b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0004d2c0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0004d2d0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0004d2e0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0004d2f0:·6e73·7572·6520·7273·7973·6c6f·6720·6973··nsure·rsyslog·is | |||
| 0004d300:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0004d310:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0004d320:·7273·7973·6c6f·670a·2020·2020·7374·6174··rsyslog.····stat | |||
| 0004d330:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0004d340:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0004d350:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0004d360:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0004d370:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0004d380:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0004d390:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0004d3a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d3b0:·2d43·4d2d·3628·6129·0a20·202d·2065·6e61··-CM-6(a).··-·ena | |||
| 0004d3c0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0004d3d0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0004d3e0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0004d3f0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0004d400:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0004d410:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0004d420:·7061·636b·6167·655f·7273·7973·6c6f·675f··package_rsyslog_ | |||
| 0004d430:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0004d440:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004d450:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004d460:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004d | 0004d320:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0004d480:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004d490:·3439·3337·2220·7461·6269·6e64·6578·3d22··4937"·tabindex=" | |||
| 0004d4a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0004d4b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0004d4c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0004d4d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0004d4e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0004d4f0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0004d500:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0004d510:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004d520:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004d530:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004d540:·2220·6964·3d22·6964·6d34·3933·3722·3e3c··"·id="idm4937">< | |||
| 0004d550:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0004d560:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0004d570:·7273·7973·6c6f·6722·0a76·6572·7369·6f6e··rsyslog".version | |||
| 0004d | 0004d330:·643d·2269·646d·3439·3337·223e·3c74·6162··d="idm4937"><tab | ||
| 0004d340:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004d350:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004d360:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004d370:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004d380:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004d390:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004d3a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004d3b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004d3c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004d3d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004d3e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004d3f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004d400:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004d410:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0004d420:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004d430:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0004d440:·7265·2072·7379·736c·6f67·2069·7320·696e··re·rsyslog·is·in | |||
| Max diff block lines reached; 107854/118256 bytes (91.20%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1549, 14 lines modified | Offset 1549, 19 lines modified | ||
| 1549 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1549 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1550 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1550 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1551 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1551 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1552 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1552 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1553 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1553 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1554 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1554 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1555 | ···························SRG-OS-000480-GPOS-00227 | 1555 | ···························SRG-OS-000480-GPOS-00227 |
| 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1557 | [[packages]] | ||
| 1558 | name·=·"rsyslog" | ||
| 1559 | version·=·"*" | ||
| 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1561 | -·name:·Ensure·rsyslog·is·installed | 1565 | -·name:·Ensure·rsyslog·is·installed |
| 1562 | ··package: | 1566 | ··package: |
| Offset 1568, 19 lines modified | Offset 1573, 14 lines modified | ||
| 1568 | ··-·NIST-800-53-CM-6(a) | 1573 | ··-·NIST-800-53-CM-6(a) |
| 1569 | ··-·enable_strategy | 1574 | ··-·enable_strategy |
| 1570 | ··-·low_complexity | 1575 | ··-·low_complexity |
| 1571 | ··-·low_disruption | 1576 | ··-·low_disruption |
| 1572 | ··-·medium_severity | 1577 | ··-·medium_severity |
| 1573 | ··-·no_reboot_needed | 1578 | ··-·no_reboot_needed |
| 1574 | ··-·package_rsyslog_installed | 1579 | ··-·package_rsyslog_installed |
| 1575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1576 | [[packages]] | ||
| 1577 | name·=·"rsyslog" | ||
| 1578 | version·=·"*" | ||
| 1579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1584 | #·Remediation·is·applicable·only·in·certain·platforms | 1585 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1585 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1586 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1623, 14 lines modified | Offset 1623, 18 lines modified | ||
| 1623 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1623 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1624 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1624 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1625 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1625 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1626 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1626 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1627 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1627 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1628 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1628 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1631 | [customizations.services] | ||
| 1632 | enabled·=·["rsyslog"] | ||
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1634 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1635 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1636 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1637 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1635 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1638 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1636 | ··block: | 1639 | ··block: |
| Offset 1654, 18 lines modified | Offset 1658, 14 lines modified | ||
| 1654 | ··-·NIST-800-53-CM-6(a) | 1658 | ··-·NIST-800-53-CM-6(a) |
| 1655 | ··-·enable_strategy | 1659 | ··-·enable_strategy |
| 1656 | ··-·low_complexity | 1660 | ··-·low_complexity |
| 1657 | ··-·low_disruption | 1661 | ··-·low_disruption |
| 1658 | ··-·medium_severity | 1662 | ··-·medium_severity |
| 1659 | ··-·no_reboot_needed | 1663 | ··-·no_reboot_needed |
| 1660 | ··-·service_rsyslog_enabled | 1664 | ··-·service_rsyslog_enabled |
| 1661 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1662 | [customizations.services] | ||
| 1663 | enabled·=·["rsyslog"] | ||
| 1664 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1665 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1665 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1666 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1666 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1667 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1667 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1668 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1668 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1669 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1669 | #·Remediation·is·applicable·only·in·certain·platforms | 1670 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1670 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1671 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3379, 14 lines modified | Offset 3379, 19 lines modified | ||
| 3379 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3379 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3380 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3380 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3381 | ···························SR·2.7,·SR·7.6 | 3381 | ···························SR·2.7,·SR·7.6 |
| 3382 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3382 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3383 | ···························A.14.2.4,·A.9.1.2 | 3383 | ···························A.14.2.4,·A.9.1.2 |
| 3384 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3384 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3385 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3385 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3387 | [[packages]] | ||
| 3388 | name·=·"cron" | ||
| 3389 | version·=·"*" | ||
| 3386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3391 | -·name:·Ensure·cron·is·installed | 3395 | -·name:·Ensure·cron·is·installed |
| 3392 | ··package: | 3396 | ··package: |
| Offset 3398, 19 lines modified | Offset 3403, 14 lines modified | ||
| 3398 | ··-·NIST-800-53-CM-6(a) | 3403 | ··-·NIST-800-53-CM-6(a) |
| 3399 | ··-·enable_strategy | 3404 | ··-·enable_strategy |
| 3400 | ··-·low_complexity | 3405 | ··-·low_complexity |
| 3401 | ··-·low_disruption | 3406 | ··-·low_disruption |
| 3402 | ··-·medium_severity | 3407 | ··-·medium_severity |
| 3403 | ··-·no_reboot_needed | 3408 | ··-·no_reboot_needed |
| 3404 | ··-·package_cron_installed | 3409 | ··-·package_cron_installed |
| 3405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3406 | [[packages]] | ||
| 3407 | name·=·"cron" | ||
| 3408 | version·=·"*" | ||
| 3409 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 10120/16068 bytes (62.98%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15095, 82 lines modified | Offset 15095, 82 lines modified | ||
| 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | ||
| 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003afd0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003afd0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003afe0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aff0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b000:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b010:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b020:·2269·646d·3237·3335·223e·3c74·6162·6c65··"idm2735"><table | |||
| 0003b030:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b040:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b050:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b060:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b070:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b080:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b090:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b0a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b0c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b0d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b0e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003 | 0003afe0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003aff0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b000:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b010:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b020:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b030:·3335·223e·3c70·7265·3e3c·636f·6465·3e0a··35"><pre><code>. | |||
| 0003b040:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b050:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b060:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b070:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b080:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b090:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b0a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b0b0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b0c0:·3733·3622·2074·6162·696e·6465·783d·2230··736"·tabindex="0 | |||
| 0003b0d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b0e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b0f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b100:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b110:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b120:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b130:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b140:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b150:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b160:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b170:·3336·223e·3c74·6162·6c65·2063·6c61·7373··36"><table·class | |||
| 0003b180:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b190:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b1a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b1b0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b1c0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b1d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b1f0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b200:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b210:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b | 0003b220:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b230:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b240:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b250:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b260:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b270:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b280:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b290:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b2a0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b2b0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b2c0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b2d0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b2e0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b2f0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b300:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b310:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b320:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b330:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b340:·5542·5455·2d32·302d·3031·3034·3530·0a20··UBTU-20-010450.· | |||
| 0003b350:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b360:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b370:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b380:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b390:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b3a0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b3b0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b3c0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b3d0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b3e0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b3f0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b400:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b110:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b120:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b130:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b140:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b150:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b160:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b170:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b180:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b190:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b1a0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b1b0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b1c0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b1d0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b1e0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b1f0:·2d53·5449·472d·5542·5455·2d32·302d·3031··-STIG-UBTU-20-01 | |||
| 0003b200:·3034·3530·0a20·202d·204e·4953·542d·3830··0450.··-·NIST-80 | |||
| 0003b210:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b220:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| Max diff block lines reached; 390536/401766 bytes (97.20%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 14 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 138 | ··package: |
| Offset 143, 19 lines modified | Offset 148, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 160 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 791, 14 lines modified | Offset 791, 19 lines modified | ||
| 791 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 791 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 792 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 792 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 793 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 793 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 794 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 794 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 795 | ············_\x8c_\x8i_\x8s·····1.3.1 | 795 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 796 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 796 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 797 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 797 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 798 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 799 | [[packages]] | ||
| 800 | name·=·"sudo" | ||
| 801 | version·=·"*" | ||
| 798 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 799 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 803 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 800 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 804 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 801 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 805 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 802 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 806 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 803 | -·name:·Ensure·sudo·is·installed | 807 | -·name:·Ensure·sudo·is·installed |
| 804 | ··package: | 808 | ··package: |
| Offset 810, 19 lines modified | Offset 815, 14 lines modified | ||
| 810 | ··-·PCI-DSSv4-2.2.6 | 815 | ··-·PCI-DSSv4-2.2.6 |
| 811 | ··-·enable_strategy | 816 | ··-·enable_strategy |
| 812 | ··-·low_complexity | 817 | ··-·low_complexity |
| 813 | ··-·low_disruption | 818 | ··-·low_disruption |
| 814 | ··-·medium_severity | 819 | ··-·medium_severity |
| 815 | ··-·no_reboot_needed | 820 | ··-·no_reboot_needed |
| 816 | ··-·package_sudo_installed | 821 | ··-·package_sudo_installed |
| 817 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 818 | [[packages]] | ||
| 819 | name·=·"sudo" | ||
| 820 | version·=·"*" | ||
| 821 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 822 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 822 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 823 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 823 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 824 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 824 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 825 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 825 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 826 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 826 | #·Remediation·is·applicable·only·in·certain·platforms | 827 | #·Remediation·is·applicable·only·in·certain·platforms |
| 827 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 828 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3348, 14 lines modified | Offset 3348, 19 lines modified | ||
| 3348 | Severity: ··medium | 3348 | Severity: ··medium |
| 3349 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3349 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3350 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3350 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3351 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3351 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3352 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3352 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3353 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3353 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3354 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3354 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3356 | [[packages]] | ||
| 3357 | name·=·"libpam-pwquality" | ||
| 3358 | version·=·"*" | ||
| 3355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3360 | -·name:·Gather·the·package·facts | 3364 | -·name:·Gather·the·package·facts |
| 3361 | ··package_facts: | 3365 | ··package_facts: |
| Offset 3378, 19 lines modified | Offset 3383, 14 lines modified | ||
| 3378 | ··-·DISA-STIG-UBTU-20-010057 | 3383 | ··-·DISA-STIG-UBTU-20-010057 |
| 3379 | ··-·enable_strategy | 3384 | ··-·enable_strategy |
| 3380 | ··-·low_complexity | 3385 | ··-·low_complexity |
| 3381 | ··-·low_disruption | 3386 | ··-·low_disruption |
| 3382 | ··-·medium_severity | 3387 | ··-·medium_severity |
| 3383 | ··-·no_reboot_needed | 3388 | ··-·no_reboot_needed |
| 3384 | ··-·package_pam_pwquality_installed | 3389 | ··-·package_pam_pwquality_installed |
| 3385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3386 | [[packages]] | ||
| 3387 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 36315/41708 bytes (87.07%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·313 | 00037d40:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15091, 82 lines modified | Offset 15091, 82 lines modified | ||
| 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | ||
| 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003af90:·6d65·6469·6174·696f·6e20·4 | 0003af90:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003afa0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d32·3733·3522·3e3c·7461·626c·6520·636c··m2735"><table·cl | |||
| 0003aff0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b000:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b010:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b020:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b030:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b040:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b050:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b060:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b070:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b080:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b090:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b0a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003 | 0003afa0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003afb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003afc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003afd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003afe0:·7365·2220·6964·3d22·6964·6d32·3733·3522··se"·id="idm2735" | |||
| 0003aff0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b000:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b010:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b020:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b070:·7461·7267·6574·3d22·2369·646d·3237·3336··target="#idm2736 | |||
| 0003b080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b0e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b0f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b100:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b110:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b120:·7365·2220·6964·3d22·6964·6d32·3733·3622··se"·id="idm2736" | |||
| 0003b130:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b140:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b150:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b160:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b170:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b180:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b190:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b1a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b1b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b1d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b1e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b1f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b200:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b210:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b220:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b230:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b240:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b250:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b260:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b270:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b280:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b290:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b2a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b2b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b2c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b2d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b2e0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b2f0:·202d·2044·4953·412d·5354·4947·2d55·4254···-·DISA-STIG-UBT | |||
| 0003b300:·552d·3230·2d30·3130·3435·300a·2020·2d20··U-20-010450.··-· | |||
| 0003b310:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b320:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b330:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b340:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b350:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b360:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b370:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b380:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b390:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b3a0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b3b0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b3c0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b0d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b0e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b0f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b100:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b110:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b120:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b130:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b140:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b150:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b160:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b170:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b180:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b190:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b1a0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b1b0:·4947·2d55·4254·552d·3230·2d30·3130·3435··IG-UBTU-20-01045 | |||
| 0003b1c0:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b1d0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b1e0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| Max diff block lines reached; 295120/306350 bytes (96.33%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 19 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 137 | ··package: |
| Offset 142, 19 lines modified | Offset 147, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 149 | ··-·low_complexity |
| 145 | ··-·low_disruption | 150 | ··-·low_disruption |
| 146 | ··-·medium_severity | 151 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | [[packages]] | ||
| 151 | name·=·"aide" | ||
| 152 | version·=·"*" | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 903, 14 lines modified | Offset 903, 19 lines modified | ||
| 903 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 903 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 904 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 904 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 905 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 905 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 906 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 906 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 907 | ············_\x8c_\x8i_\x8s·····1.3.1 | 907 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 908 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 908 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 909 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 911 | [[packages]] | ||
| 912 | name·=·"sudo" | ||
| 913 | version·=·"*" | ||
| 910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 914 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 911 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 915 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 912 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 916 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 913 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 917 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 914 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 918 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 915 | -·name:·Ensure·sudo·is·installed | 919 | -·name:·Ensure·sudo·is·installed |
| 916 | ··package: | 920 | ··package: |
| Offset 922, 19 lines modified | Offset 927, 14 lines modified | ||
| 922 | ··-·PCI-DSSv4-2.2.6 | 927 | ··-·PCI-DSSv4-2.2.6 |
| 923 | ··-·enable_strategy | 928 | ··-·enable_strategy |
| 924 | ··-·low_complexity | 929 | ··-·low_complexity |
| 925 | ··-·low_disruption | 930 | ··-·low_disruption |
| 926 | ··-·medium_severity | 931 | ··-·medium_severity |
| 927 | ··-·no_reboot_needed | 932 | ··-·no_reboot_needed |
| 928 | ··-·package_sudo_installed | 933 | ··-·package_sudo_installed |
| 929 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 930 | [[packages]] | ||
| 931 | name·=·"sudo" | ||
| 932 | version·=·"*" | ||
| 933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 934 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 935 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 935 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 936 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 936 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 937 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 937 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 938 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 938 | #·Remediation·is·applicable·only·in·certain·platforms | 939 | #·Remediation·is·applicable·only·in·certain·platforms |
| 939 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 940 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3796, 14 lines modified | Offset 3796, 19 lines modified | ||
| 3796 | Severity: ··medium | 3796 | Severity: ··medium |
| 3797 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3797 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3798 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3798 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3799 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3799 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3800 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3800 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3801 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3801 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3802 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3802 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3804 | [[packages]] | ||
| 3805 | name·=·"libpam-pwquality" | ||
| 3806 | version·=·"*" | ||
| 3803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3804 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3808 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3805 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3809 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3806 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3810 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3807 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3811 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3808 | -·name:·Gather·the·package·facts | 3812 | -·name:·Gather·the·package·facts |
| 3809 | ··package_facts: | 3813 | ··package_facts: |
| Offset 3826, 19 lines modified | Offset 3831, 14 lines modified | ||
| 3826 | ··-·DISA-STIG-UBTU-20-010057 | 3831 | ··-·DISA-STIG-UBTU-20-010057 |
| 3827 | ··-·enable_strategy | 3832 | ··-·enable_strategy |
| 3828 | ··-·low_complexity | 3833 | ··-·low_complexity |
| 3829 | ··-·low_disruption | 3834 | ··-·low_disruption |
| 3830 | ··-·medium_severity | 3835 | ··-·medium_severity |
| 3831 | ··-·no_reboot_needed | 3836 | ··-·no_reboot_needed |
| 3832 | ··-·package_pam_pwquality_installed | 3837 | ··-·package_pam_pwquality_installed |
| 3833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3834 | [[packages]] | ||
| 3835 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 29423/34826 bytes (84.49%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15118, 82 lines modified | Offset 15118, 82 lines modified | ||
| 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | ||
| 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b140:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b150:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b160:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b170:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b180:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b190:·6964·3d22·6964·6d32·3733·3522·3e3c·7072··id="idm2735"><pr | |||
| 0003b1a0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b1b0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b1c0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b140:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b150:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b160:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b170:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b180:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b190:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b1a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b1c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b1d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b1e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b1f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b200:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b210:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b220:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b230:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b240:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b250:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b260:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b270:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b280:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b290:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b2a0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b2b0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b2c0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b2d0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b2e0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b2f0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b300:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b310:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b320:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b330:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b340:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b350:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b360:·4254·552d·3230·2d30·3130·3435·300a·2020··BTU-20-010450.·· | |||
| 0003b370:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b380:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b390:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b3a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b3b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b3c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b3d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b3e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b3f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b400:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b410:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b420:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b1d0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b1e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b4 | 0003b1f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b46 | 0003b200:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b210:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b220:·6574·3d22·2369·646d·3237·3336·2220·7461··et="#idm2736"·ta | ||
| 0003b | 0003b230:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b240:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b250:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b4c | 0003b260:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b270:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b280:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4f0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b500:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b510:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b520:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b530:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b540:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 0003b550:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b560:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b | 0003b290:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b2a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b2b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b2c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b2d0:·6964·3d22·6964·6d32·3733·3622·3e3c·7461··id="idm2736"><ta | |||
| 0003b2e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b2f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b300:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b310:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b320:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b330:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b340:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b350:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b360:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b370:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b380:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b390:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b3a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b3b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b3c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b3d0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b3e0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b3f0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b400:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b410:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b420:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b430:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| Max diff block lines reached; 422748/433978 bytes (97.41%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 14 lines modified | Offset 124, 19 lines modified | ||
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 127 | ············_\x8c_\x8i_\x8s············1.4.1 | 127 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 140 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 141 | ··package: |
| Offset 146, 19 lines modified | Offset 151, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 895, 14 lines modified | Offset 895, 19 lines modified | ||
| 895 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 895 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 896 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 896 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 897 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 897 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 898 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 898 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 899 | ············_\x8c_\x8i_\x8s·····1.3.1 | 899 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 900 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 900 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 901 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 901 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 903 | [[packages]] | ||
| 904 | name·=·"sudo" | ||
| 905 | version·=·"*" | ||
| 902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 907 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 908 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 909 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 910 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 907 | -·name:·Ensure·sudo·is·installed | 911 | -·name:·Ensure·sudo·is·installed |
| 908 | ··package: | 912 | ··package: |
| Offset 914, 19 lines modified | Offset 919, 14 lines modified | ||
| 914 | ··-·PCI-DSSv4-2.2.6 | 919 | ··-·PCI-DSSv4-2.2.6 |
| 915 | ··-·enable_strategy | 920 | ··-·enable_strategy |
| 916 | ··-·low_complexity | 921 | ··-·low_complexity |
| 917 | ··-·low_disruption | 922 | ··-·low_disruption |
| 918 | ··-·medium_severity | 923 | ··-·medium_severity |
| 919 | ··-·no_reboot_needed | 924 | ··-·no_reboot_needed |
| 920 | ··-·package_sudo_installed | 925 | ··-·package_sudo_installed |
| 921 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 922 | [[packages]] | ||
| 923 | name·=·"sudo" | ||
| 924 | version·=·"*" | ||
| 925 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 926 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 926 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 927 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 927 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 928 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 928 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 929 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 929 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 930 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 930 | #·Remediation·is·applicable·only·in·certain·platforms | 931 | #·Remediation·is·applicable·only·in·certain·platforms |
| 931 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 932 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3452, 14 lines modified | Offset 3452, 19 lines modified | ||
| 3452 | Severity: ··medium | 3452 | Severity: ··medium |
| 3453 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3453 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3454 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3454 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3455 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3455 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3456 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3456 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3457 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3457 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3458 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3458 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3460 | [[packages]] | ||
| 3461 | name·=·"libpam-pwquality" | ||
| 3462 | version·=·"*" | ||
| 3459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3464 | -·name:·Gather·the·package·facts | 3468 | -·name:·Gather·the·package·facts |
| 3465 | ··package_facts: | 3469 | ··package_facts: |
| Offset 3482, 19 lines modified | Offset 3487, 14 lines modified | ||
| 3482 | ··-·DISA-STIG-UBTU-20-010057 | 3487 | ··-·DISA-STIG-UBTU-20-010057 |
| 3483 | ··-·enable_strategy | 3488 | ··-·enable_strategy |
| 3484 | ··-·low_complexity | 3489 | ··-·low_complexity |
| 3485 | ··-·low_disruption | 3490 | ··-·low_disruption |
| 3486 | ··-·medium_severity | 3491 | ··-·medium_severity |
| 3487 | ··-·no_reboot_needed | 3492 | ··-·no_reboot_needed |
| 3488 | ··-·package_pam_pwquality_installed | 3493 | ··-·package_pam_pwquality_installed |
| 3489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3490 | [[packages]] | ||
| 3491 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 39576/44969 bytes (88.01%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·313 | 00037d40:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15114, 82 lines modified | Offset 15114, 82 lines modified | ||
| 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | ||
| 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b100:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b110:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b120:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b130:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b140:·2220·6964·3d22·6964·6d32·3733·3522·3e3c··"·id="idm2735">< | |||
| 0003b150:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b160:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b170:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b180:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b190:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b1f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b200:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b100:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b110:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b120:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b130:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b140:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b150:·6964·6d32·3733·3522·3e3c·7072·653e·3c63··idm2735"><pre><c | |||
| 0003b160:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b170:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b180:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b190:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b1a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b1e0:·2369·646d·3237·3336·2220·7461·6269·6e64··#idm2736"·tabind | |||
| 0003b1f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b200:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b210:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b220:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b230:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b240:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b250:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b260:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b270:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b280:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b290:·6964·6d32·3733·3622·3e3c·7461·626c·6520··idm2736"><table· | |||
| 0003b2a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b2b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b2c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b2e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b2f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b300:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b310:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b320:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b330:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b340:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b350:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b360:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b370:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b380:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b390:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b3a0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b3b0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b3c0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b3d0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b3e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b3f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b400:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b410:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b420:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b430:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b440:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b450:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b460:·5354·4947·2d55·4254·552d·3230·2d30·3130··STIG-UBTU-20-010 | |||
| 0003b470:·3435·300a·2020·2d20·4e49·5354·2d38·3030··450.··-·NIST-800 | |||
| 0003b480:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b490:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b4a0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b4b0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b230:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b240:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b250:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b260:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b270:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b280:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b290:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b2a0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b2b0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b2c0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b2d0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b2e0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b2f0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b300:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b310:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b320:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b330:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b340:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b350:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b360:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b370:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b380:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b390:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b3a0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b | 0003b4c0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003b4d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 422198/433428 bytes (97.41%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 126 | ············_\x8c_\x8i_\x8s············1.4.1 | 126 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1007, 14 lines modified | Offset 1007, 19 lines modified | ||
| 1007 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1007 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1008 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1008 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1009 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1009 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1010 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1010 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1011 | ············_\x8c_\x8i_\x8s·····1.3.1 | 1011 | ············_\x8c_\x8i_\x8s·····1.3.1 |
| 1012 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1012 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1013 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1013 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1015 | [[packages]] | ||
| 1016 | name·=·"sudo" | ||
| 1017 | version·=·"*" | ||
| 1014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1015 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1019 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1016 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1020 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1017 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1021 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1018 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1022 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1019 | -·name:·Ensure·sudo·is·installed | 1023 | -·name:·Ensure·sudo·is·installed |
| 1020 | ··package: | 1024 | ··package: |
| Offset 1026, 19 lines modified | Offset 1031, 14 lines modified | ||
| 1026 | ··-·PCI-DSSv4-2.2.6 | 1031 | ··-·PCI-DSSv4-2.2.6 |
| 1027 | ··-·enable_strategy | 1032 | ··-·enable_strategy |
| 1028 | ··-·low_complexity | 1033 | ··-·low_complexity |
| 1029 | ··-·low_disruption | 1034 | ··-·low_disruption |
| 1030 | ··-·medium_severity | 1035 | ··-·medium_severity |
| 1031 | ··-·no_reboot_needed | 1036 | ··-·no_reboot_needed |
| 1032 | ··-·package_sudo_installed | 1037 | ··-·package_sudo_installed |
| 1033 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1034 | [[packages]] | ||
| 1035 | name·=·"sudo" | ||
| 1036 | version·=·"*" | ||
| 1037 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1038 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1039 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1040 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1041 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1042 | #·Remediation·is·applicable·only·in·certain·platforms | 1043 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1043 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1044 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3900, 14 lines modified | Offset 3900, 19 lines modified | ||
| 3900 | Severity: ··medium | 3900 | Severity: ··medium |
| 3901 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3901 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3902 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 3902 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 3903 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 3903 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 3904 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 3904 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 3905 | ············_\x8c_\x8i_\x8s·····5.3.1 | 3905 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 3906 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 3906 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 3907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3908 | [[packages]] | ||
| 3909 | name·=·"libpam-pwquality" | ||
| 3910 | version·=·"*" | ||
| 3907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3911 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3912 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3913 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3914 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3915 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3912 | -·name:·Gather·the·package·facts | 3916 | -·name:·Gather·the·package·facts |
| 3913 | ··package_facts: | 3917 | ··package_facts: |
| Offset 3930, 19 lines modified | Offset 3935, 14 lines modified | ||
| 3930 | ··-·DISA-STIG-UBTU-20-010057 | 3935 | ··-·DISA-STIG-UBTU-20-010057 |
| 3931 | ··-·enable_strategy | 3936 | ··-·enable_strategy |
| 3932 | ··-·low_complexity | 3937 | ··-·low_complexity |
| 3933 | ··-·low_disruption | 3938 | ··-·low_disruption |
| 3934 | ··-·medium_severity | 3939 | ··-·medium_severity |
| 3935 | ··-·no_reboot_needed | 3940 | ··-·no_reboot_needed |
| 3936 | ··-·package_pam_pwquality_installed | 3941 | ··-·package_pam_pwquality_installed |
| 3937 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3938 | [[packages]] | ||
| 3939 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 39576/44983 bytes (87.98%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 20045, 78 lines modified | Offset 20045, 78 lines modified | ||
| 0004e4c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004e4c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004e4d0:·646d·3130·3830·3922·2074·6162·696e·6465··dm10809"·tabinde | 0004e4d0:·646d·3130·3830·3922·2074·6162·696e·6465··dm10809"·tabinde | ||
| 0004e4e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0004e4e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0004e4f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0004e4f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0004e500:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0004e500:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0004e510:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0004e510:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0004e520:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0004e520:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0004e530:·656d·6564·6961·7469·6f6e·204 | 0004e530:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0004e540:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0004e550:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0004e560:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0004e570:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0004e580:·646d·3130·3830·3922·3e3c·7461·626c·6520··dm10809"><table· | |||
| 0004e590:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004e5 | 0004e540:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0004e550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004e560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0004e570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0004e580:·7073·6522·2069·643d·2269·646d·3130·3830··pse"·id="idm1080 | |||
| 0004e590:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | |||
| 0004e5a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0004e5b0:·203d·2022·7273·7973·6c6f·6722·0a76·6572···=·"rsyslog".ver | |||
| 0004e5c0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0004e5d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0004e5e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0004e5f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0004e600:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0004e610:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0004e620:·6d31·3038·3130·2220·7461·6269·6e64·6578··m10810"·tabindex | |||
| 0004e630:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0004e640:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0004e650:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0004e660:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0004e670:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0004e680:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0004e690:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0004e6a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004e6b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004e6c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004e6d0:·6d31·3038·3130·223e·3c74·6162·6c65·2063··m10810"><table·c | |||
| 0004e6e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0004e | 0004e6f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004e5c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004e5d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004e5e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004e5f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004e | 0004e700:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004e710:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0004e720:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0004e730:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004e740:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004e750:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0004e760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004e770:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0004e780:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0004e790:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0004e7a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0004e | 0004e7b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0004e620:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004e630:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004e640:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004e650:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004e660:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004e670:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0004e680:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0004e | 0004e7c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0004e7d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2072··-·name:·Ensure·r | |||
| 0004e7e0:·7379·736c·6f67·2069·7320·696e·7374·616c··syslog·is·instal | |||
| 0004e7f0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0004e800:·2020·206e·616d·653a·2072·7379·736c·6f67·····name:·rsyslog | |||
| 0004e810:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0004e820:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0004e830:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0004e840:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0004e850:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0004e860:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0004e870:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0004e880:·5d0a·2020·7461·6773·3a0a·2020·2d20·4e49··].··tags:.··-·NI | |||
| 0004e890:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0004e8a0:·290a·2020·2d20·656e·6162·6c65·5f73·7472··).··-·enable_str | |||
| 0004e8b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0004e8c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0004e8d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0004e8e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0004e8f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0004e | 0004e900:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | ||
| 0004e910:·5f72·7379·736c·6f67·5f69·6e73·7461·6c6c··_rsyslog_install | |||
| 0004e6b0:·2020·2020·6e61·6d65·3a20·7273·7973·6c6f······name:·rsyslo | |||
| 0004e6c0:·670a·2020·2020·7374·6174·653a·2070·7265··g.····state:·pre | |||
| 0004e6d0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0004e6e0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0004e6f0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0004e700:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0004e710:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0004e720:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0004e730:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0004e740:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0004e750:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0004e760:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0004e770:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004e780:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004e790:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004e7a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004e7b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0004e7c0:·655f·7273·7973·6c6f·675f·696e·7374·616c··e_rsyslog_instal | |||
| 0004e7d0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0004e7e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004e7f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0004e800:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0004e810:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0004e820:·7267·6574·3d22·2369·646d·3130·3831·3022··rget="#idm10810" | |||
| Max diff block lines reached; 136144/146684 bytes (92.81%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1557, 14 lines modified | Offset 1557, 19 lines modified | ||
| 1557 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1557 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1558 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1558 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1562 | ···························SRG-OS-000480-GPOS-00227 | 1562 | ···························SRG-OS-000480-GPOS-00227 |
| 1563 | ············_\x8c_\x8i_\x8s············4.2.1.1 | 1563 | ············_\x8c_\x8i_\x8s············4.2.1.1 |
| 1564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1565 | [[packages]] | ||
| 1566 | name·=·"rsyslog" | ||
| 1567 | version·=·"*" | ||
| 1564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1569 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1570 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1571 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1572 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1569 | -·name:·Ensure·rsyslog·is·installed | 1573 | -·name:·Ensure·rsyslog·is·installed |
| 1570 | ··package: | 1574 | ··package: |
| Offset 1576, 19 lines modified | Offset 1581, 14 lines modified | ||
| 1576 | ··-·NIST-800-53-CM-6(a) | 1581 | ··-·NIST-800-53-CM-6(a) |
| 1577 | ··-·enable_strategy | 1582 | ··-·enable_strategy |
| 1578 | ··-·low_complexity | 1583 | ··-·low_complexity |
| 1579 | ··-·low_disruption | 1584 | ··-·low_disruption |
| 1580 | ··-·medium_severity | 1585 | ··-·medium_severity |
| 1581 | ··-·no_reboot_needed | 1586 | ··-·no_reboot_needed |
| 1582 | ··-·package_rsyslog_installed | 1587 | ··-·package_rsyslog_installed |
| 1583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1584 | [[packages]] | ||
| 1585 | name·=·"rsyslog" | ||
| 1586 | version·=·"*" | ||
| 1587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1588 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1589 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1590 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1591 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1592 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1592 | #·Remediation·is·applicable·only·in·certain·platforms | 1593 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1593 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1594 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1634, 14 lines modified | Offset 1634, 18 lines modified | ||
| 1634 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1634 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1635 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1635 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1636 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1636 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1638 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010432 | 1638 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010432 |
| 1639 | ············_\x8c_\x8i_\x8s············4.2.1.2 | 1639 | ············_\x8c_\x8i_\x8s············4.2.1.2 |
| 1640 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238353r654234_rule | 1640 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238353r654234_rule |
| 1641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1642 | [customizations.services] | ||
| 1643 | enabled·=·["rsyslog"] | ||
| 1641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1646 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1649 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1647 | ··block: | 1650 | ··block: |
| Offset 1666, 18 lines modified | Offset 1670, 14 lines modified | ||
| 1666 | ··-·NIST-800-53-CM-6(a) | 1670 | ··-·NIST-800-53-CM-6(a) |
| 1667 | ··-·enable_strategy | 1671 | ··-·enable_strategy |
| 1668 | ··-·low_complexity | 1672 | ··-·low_complexity |
| 1669 | ··-·low_disruption | 1673 | ··-·low_disruption |
| 1670 | ··-·medium_severity | 1674 | ··-·medium_severity |
| 1671 | ··-·no_reboot_needed | 1675 | ··-·no_reboot_needed |
| 1672 | ··-·service_rsyslog_enabled | 1676 | ··-·service_rsyslog_enabled |
| 1673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1674 | [customizations.services] | ||
| 1675 | enabled·=·["rsyslog"] | ||
| 1676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1677 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1678 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1679 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1680 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1681 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1681 | #·Remediation·is·applicable·only·in·certain·platforms | 1682 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1682 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1683 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3385, 14 lines modified | Offset 3385, 18 lines modified | ||
| 3385 | apport·service·can·be·disabled·with·the·following·command: | 3385 | apport·service·can·be·disabled·with·the·following·command: |
| 3386 | $·sudo·systemctl·mask·--now·apport.service | 3386 | $·sudo·systemctl·mask·--now·apport.service |
| 3387 | ···········The·Apport·service·modifies·the·kernel·fs.suid_dumpable·configuration | 3387 | ···········The·Apport·service·modifies·the·kernel·fs.suid_dumpable·configuration |
| 3388 | Rationale:·at·runtime·which·prevents·other·hardening·from·being·persistent. | 3388 | Rationale:·at·runtime·which·prevents·other·hardening·from·being·persistent. |
| 3389 | ···········Disabling·the·service·prevents·this·behavior. | 3389 | ···········Disabling·the·service·prevents·this·behavior. |
| 3390 | Severity: ·unknown | 3390 | Severity: ·unknown |
| 3391 | Rule·ID:···xccdf_org.ssgproject.content_rule_service_apport_disabled | 3391 | Rule·ID:···xccdf_org.ssgproject.content_rule_service_apport_disabled |
| 3392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3393 | [customizations.services] | ||
| 3394 | masked·=·["apport"] | ||
| 3392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3398 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3399 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3397 | -·name:·Gather·the·package·facts | 3400 | -·name:·Gather·the·package·facts |
| 3398 | ··package_facts: | 3401 | ··package_facts: |
| Offset 3464, 37 lines modified | Offset 3468, 14 lines modified | ||
| 3464 | ··tags: | 3468 | ··tags: |
| 3465 | ··-·disable_strategy | 3469 | ··-·disable_strategy |
| 3466 | ··-·low_complexity | 3470 | ··-·low_complexity |
| 3467 | ··-·low_disruption | 3471 | ··-·low_disruption |
| 3468 | ··-·no_reboot_needed | 3472 | ··-·no_reboot_needed |
| 3469 | ··-·service_apport_disabled | 3473 | ··-·service_apport_disabled |
| 3470 | ··-·unknown_severity | 3474 | ··-·unknown_severity |
| 3471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 3474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 3475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3476 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 3477 | kind:·MachineConfig | ||
| Max diff block lines reached; 11023/17274 bytes (63.81%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e00:·6f66·2032·3032·3 | 00037e00:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15073, 82 lines modified | Offset 15073, 82 lines modified | ||
| 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | ||
| 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ae70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ae80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ae90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003aea0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aeb0:·2069·643d·2269·646d·3237·3335·223e·3c74···id="idm2735"><t | |||
| 0003aec0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003aed0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003aee0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003aef0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003af00:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003af10:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003af20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af30:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003af40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003af50:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003af60:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003af70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a | 0003ae70:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003ae80:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ae90:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aea0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aeb0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aec0:·646d·3237·3335·223e·3c70·7265·3e3c·636f··dm2735"><pre><co | |||
| 0003aed0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003aee0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003aef0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003af00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003af10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003af20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003af30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003af40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003af50:·6964·6d32·3733·3622·2074·6162·696e·6465··idm2736"·tabinde | |||
| 0003af60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003af70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003af80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003af90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003afa0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003afb0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003afc0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3237·3336·223e·3c74·6162·6c65·2063··dm2736"><table·c | |||
| 0003b010:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b020:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b030:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b040:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b050:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b060:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b070:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b080:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b090:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0a0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003 | 0003b0b0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b0c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b0d0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b0e0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b0f0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b100:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b110:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b120:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b130:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b140:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b150:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b160:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b170:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b180:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b190:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b1a0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b1b0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b1c0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b1d0:·5449·472d·5542·5455·2d32·302d·3031·3034··TIG-UBTU-20-0104 | |||
| 0003b1e0:·3530·0a20·202d·204e·4953·542d·3830·302d··50.··-·NIST-800- | |||
| 0003b1f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b200:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b210:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b220:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b230:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b240:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b250:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b260:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b270:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b280:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b290:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003afa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003afb0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003afc0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003afd0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003afe0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003aff0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b000:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b010:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b020:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b030:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b040:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b050:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b060:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b070:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b080:·4449·5341·2d53·5449·472d·5542·5455·2d32··DISA-STIG-UBTU-2 | |||
| 0003b090:·302d·3031·3034·3530·0a20·202d·204e·4953··0-010450.··-·NIS | |||
| 0003b0a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b0b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b0c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b0d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| Max diff block lines reached; 213200/224292 bytes (95.05%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R11 | 42 | ··············Guide·(STIG)·V1R11 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 117 | ············_\x8c_\x8i_\x8s············1.4.1 | 117 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 136, 19 lines modified | Offset 141, 14 lines modified | ||
| 136 | ··-·PCI-DSSv4-11.5.2 | 141 | ··-·PCI-DSSv4-11.5.2 |
| 137 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 138 | ··-·low_complexity | 143 | ··-·low_complexity |
| 139 | ··-·low_disruption | 144 | ··-·low_disruption |
| 140 | ··-·medium_severity | 145 | ··-·medium_severity |
| 141 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 142 | ··-·package_aide_installed | 147 | ··-·package_aide_installed |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7085, 14 lines modified | Offset 7085, 19 lines modified | ||
| 7085 | Severity: ··medium | 7085 | Severity: ··medium |
| 7086 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7086 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7087 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 7087 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 7088 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 7088 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 7089 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 7089 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 7090 | ············_\x8c_\x8i_\x8s·····5.3.1 | 7090 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 7091 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 7091 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 7092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7093 | [[packages]] | ||
| 7094 | name·=·"libpam-pwquality" | ||
| 7095 | version·=·"*" | ||
| 7092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7096 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7093 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7097 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7094 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7098 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7095 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7099 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7096 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7097 | -·name:·Gather·the·package·facts | 7101 | -·name:·Gather·the·package·facts |
| 7098 | ··package_facts: | 7102 | ··package_facts: |
| Offset 7115, 19 lines modified | Offset 7120, 14 lines modified | ||
| 7115 | ··-·DISA-STIG-UBTU-20-010057 | 7120 | ··-·DISA-STIG-UBTU-20-010057 |
| 7116 | ··-·enable_strategy | 7121 | ··-·enable_strategy |
| 7117 | ··-·low_complexity | 7122 | ··-·low_complexity |
| 7118 | ··-·low_disruption | 7123 | ··-·low_disruption |
| 7119 | ··-·medium_severity | 7124 | ··-·medium_severity |
| 7120 | ··-·no_reboot_needed | 7125 | ··-·no_reboot_needed |
| 7121 | ··-·package_pam_pwquality_installed | 7126 | ··-·package_pam_pwquality_installed |
| 7122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7123 | [[packages]] | ||
| 7124 | name·=·"libpam-pwquality" | ||
| 7125 | version·=·"*" | ||
| 7126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7131 | #·Remediation·is·applicable·only·in·certain·platforms | 7132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7132 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7133 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 7500, 14 lines modified | Offset 7500, 19 lines modified | ||
| 7500 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. | 7500 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. |
| 7501 | Severity: ··medium | 7501 | Severity: ··medium |
| 7502 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed | 7502 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed |
| 7503 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 7503 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 7504 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 7504 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 7505 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010005 | 7505 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010005 |
| 7506 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238200r653775_rule | 7506 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238200r653775_rule |
| 7507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7508 | [[packages]] | ||
| 7509 | name·=·"vlock" | ||
| 7510 | version·=·"*" | ||
| 7507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7508 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7509 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7510 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7511 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7512 | -·name:·Ensure·vlock·is·installed | 7516 | -·name:·Ensure·vlock·is·installed |
| 7513 | ··package: | 7517 | ··package: |
| Offset 7518, 19 lines modified | Offset 7523, 14 lines modified | ||
| 7518 | ··-·DISA-STIG-UBTU-20-010005 | 7523 | ··-·DISA-STIG-UBTU-20-010005 |
| 7519 | ··-·enable_strategy | 7524 | ··-·enable_strategy |
| 7520 | ··-·low_complexity | 7525 | ··-·low_complexity |
| 7521 | ··-·low_disruption | 7526 | ··-·low_disruption |
| 7522 | ··-·medium_severity | 7527 | ··-·medium_severity |
| 7523 | ··-·no_reboot_needed | 7528 | ··-·no_reboot_needed |
| 7524 | ··-·vlock_installed | 7529 | ··-·vlock_installed |
| 7525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7526 | [[packages]] | ||
| 7527 | name·=·"vlock" | ||
| Max diff block lines reached; 22877/28410 bytes (80.52%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15108, 82 lines modified | Offset 15108, 82 lines modified | ||
| 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | ||
| 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b0a0:·6469·6174·696f·6e20·4 | 0003b0a0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b0b0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b0c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0f0:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b100:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b110:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b120:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b0b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b0c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b0f0:·3930·3222·3e3c·7461·626c·6520·636c·6173··902"><table·clas | |||
| 0003b100:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b110:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b120:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b130:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b140:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b150:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b160:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b170:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b180:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b190:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b1a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b1b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b1c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1f0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b200:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b210:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b220:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b230:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b240:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b250:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b260:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b270:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b280:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b290:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b2a0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b2b0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b2c0:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b2d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2e0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b300:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b310:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b320:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b330:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b340:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b350:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b360:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b370:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b380:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b3 | 0003b130:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b140:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b150:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b160:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b170:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003b180:·7267·6574·3d22·2369·646d·3239·3033·2220··rget="#idm2903"· | ||
| 0003b | 0003b190:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b1a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b | 0003b1b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b | 0003b1c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003b1d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b1e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b450:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b460:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b470:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b480:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b490:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b4a0:·3930·3322·3e3c·7072·653e·3c63·6f64·653e··903"><pre><code> | |||
| 0003b4b0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b4c0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b | 0003b1f0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b200:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b210:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b220:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b230:·2220·6964·3d22·6964·6d32·3930·3322·3e3c··"·id="idm2903">< | |||
| 0003b240:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b250:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b260:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b270:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b280:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b290:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b2c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b2f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b300:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b310:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b320:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b330:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b340:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b350:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b360:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b370:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b380:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b390:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b3a0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| Max diff block lines reached; 383642/394872 bytes (97.16%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1779, 14 lines modified | Offset 1779, 19 lines modified | ||
| 1779 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1779 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1780 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1780 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1781 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1781 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1782 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1782 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1783 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1783 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1784 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1784 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1785 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1785 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1786 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1787 | [[packages]] | ||
| 1788 | name·=·"sudo" | ||
| 1789 | version·=·"*" | ||
| 1786 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1790 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1787 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1791 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1788 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1792 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1789 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1793 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1790 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1794 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1791 | -·name:·Ensure·sudo·is·installed | 1795 | -·name:·Ensure·sudo·is·installed |
| 1792 | ··package: | 1796 | ··package: |
| Offset 1798, 19 lines modified | Offset 1803, 14 lines modified | ||
| 1798 | ··-·PCI-DSSv4-2.2.6 | 1803 | ··-·PCI-DSSv4-2.2.6 |
| 1799 | ··-·enable_strategy | 1804 | ··-·enable_strategy |
| 1800 | ··-·low_complexity | 1805 | ··-·low_complexity |
| 1801 | ··-·low_disruption | 1806 | ··-·low_disruption |
| 1802 | ··-·medium_severity | 1807 | ··-·medium_severity |
| 1803 | ··-·no_reboot_needed | 1808 | ··-·no_reboot_needed |
| 1804 | ··-·package_sudo_installed | 1809 | ··-·package_sudo_installed |
| 1805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1806 | [[packages]] | ||
| 1807 | name·=·"sudo" | ||
| 1808 | version·=·"*" | ||
| 1809 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1810 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1810 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1811 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1811 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1812 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1812 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1813 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1813 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1814 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1814 | #·Remediation·is·applicable·only·in·certain·platforms | 1815 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1815 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1816 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7107, 14 lines modified | Offset 7107, 19 lines modified | ||
| 7107 | ············attacks·on·the·system. | 7107 | ············attacks·on·the·system. |
| 7108 | Severity: ··medium | 7108 | Severity: ··medium |
| 7109 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7109 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7110 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7110 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7111 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7111 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7112 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7112 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7113 | ············_\x8c_\x8i_\x8s····5.4.1 | 7113 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7115 | [[packages]] | ||
| 7116 | name·=·"libpam-pwquality" | ||
| 7117 | version·=·"*" | ||
| 7114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7119 | -·name:·Gather·the·package·facts | 7123 | -·name:·Gather·the·package·facts |
| 7120 | ··package_facts: | 7124 | ··package_facts: |
| Offset 7137, 19 lines modified | Offset 7142, 14 lines modified | ||
| 7137 | ··-·DISA-STIG-UBTU-22-215010 | 7142 | ··-·DISA-STIG-UBTU-22-215010 |
| 7138 | ··-·enable_strategy | 7143 | ··-·enable_strategy |
| 7139 | ··-·low_complexity | 7144 | ··-·low_complexity |
| 7140 | ··-·low_disruption | 7145 | ··-·low_disruption |
| 7141 | ··-·medium_severity | 7146 | ··-·medium_severity |
| 7142 | ··-·no_reboot_needed | 7147 | ··-·no_reboot_needed |
| 7143 | ··-·package_pam_pwquality_installed | 7148 | ··-·package_pam_pwquality_installed |
| 7144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7145 | [[packages]] | ||
| 7146 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 36805/42219 bytes (87.18%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·313 | 00037d40:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15099, 82 lines modified | Offset 15099, 82 lines modified | ||
| 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b010:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b020:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b030:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b040:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b050:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b060:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b070:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b080:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b090:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b0a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b0b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b0c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0d0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b0e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0f0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b100:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b110:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b010:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b020:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b030:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b040:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b050:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b060:·6964·6d32·3930·3222·3e3c·7072·653e·3c63··idm2902"><pre><c | |||
| 0003b070:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b080:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b090:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b0a0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b0b0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b0c0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0d0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b0f0:·2369·646d·3239·3033·2220·7461·6269·6e64··#idm2903"·tabind | |||
| 0003b100:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b110:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b120:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b130:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b140:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b150:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b160:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b170:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b180:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b190:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b1a0:·6964·6d32·3930·3322·3e3c·7461·626c·6520··idm2903"><table· | |||
| 0003b1b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b200:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b210:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b220:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b230:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b240:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b250:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b260:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b270:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b280:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b290:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b2a0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b2b0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b2c0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b2d0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b2e0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b2f0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b300:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b310:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b320:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b330:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b340:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b350:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b370:·5354·4947·2d55·4254·552d·3232·2d36·3531··STIG-UBTU-22-651 | |||
| 0003b380:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b140:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b150:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b160:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b170:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b180:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b190:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b1a0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b1b0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b1c0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b1d0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b1e0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b1f0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b200:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b210:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b220:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b230:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b240:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b250:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b260:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b270:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b280:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b290:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b2a0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b2b0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b | 0003b3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003b3e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 288778/300008 bytes (96.26%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 14 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 125 | ············_\x8c_\x8i_\x8s············1.3.1 | 125 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 138 | ··package: |
| Offset 143, 19 lines modified | Offset 148, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 160 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1512, 14 lines modified | Offset 1512, 19 lines modified | ||
| 1512 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1512 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1513 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1513 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1514 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1514 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1515 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1515 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1516 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1516 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1517 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1517 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1518 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1518 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1519 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1520 | [[packages]] | ||
| 1521 | name·=·"sudo" | ||
| 1522 | version·=·"*" | ||
| 1519 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1520 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1521 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1522 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1523 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1524 | -·name:·Ensure·sudo·is·installed | 1528 | -·name:·Ensure·sudo·is·installed |
| 1525 | ··package: | 1529 | ··package: |
| Offset 1531, 19 lines modified | Offset 1536, 14 lines modified | ||
| 1531 | ··-·PCI-DSSv4-2.2.6 | 1536 | ··-·PCI-DSSv4-2.2.6 |
| 1532 | ··-·enable_strategy | 1537 | ··-·enable_strategy |
| 1533 | ··-·low_complexity | 1538 | ··-·low_complexity |
| 1534 | ··-·low_disruption | 1539 | ··-·low_disruption |
| 1535 | ··-·medium_severity | 1540 | ··-·medium_severity |
| 1536 | ··-·no_reboot_needed | 1541 | ··-·no_reboot_needed |
| 1537 | ··-·package_sudo_installed | 1542 | ··-·package_sudo_installed |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"sudo" | ||
| 1541 | version·=·"*" | ||
| 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1543 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1544 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1545 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1546 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1547 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1547 | #·Remediation·is·applicable·only·in·certain·platforms | 1548 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1548 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1549 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 6840, 14 lines modified | Offset 6840, 19 lines modified | ||
| 6840 | ············attacks·on·the·system. | 6840 | ············attacks·on·the·system. |
| 6841 | Severity: ··medium | 6841 | Severity: ··medium |
| 6842 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 6842 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 6843 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 6843 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 6844 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 6844 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 6845 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 6845 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 6846 | ············_\x8c_\x8i_\x8s····5.4.1 | 6846 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 6847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6848 | [[packages]] | ||
| 6849 | name·=·"libpam-pwquality" | ||
| 6850 | version·=·"*" | ||
| 6847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 6851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 6848 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6852 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6849 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6853 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6850 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6854 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6851 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 6855 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 6852 | -·name:·Gather·the·package·facts | 6856 | -·name:·Gather·the·package·facts |
| 6853 | ··package_facts: | 6857 | ··package_facts: |
| Offset 6870, 19 lines modified | Offset 6875, 14 lines modified | ||
| 6870 | ··-·DISA-STIG-UBTU-22-215010 | 6875 | ··-·DISA-STIG-UBTU-22-215010 |
| 6871 | ··-·enable_strategy | 6876 | ··-·enable_strategy |
| 6872 | ··-·low_complexity | 6877 | ··-·low_complexity |
| 6873 | ··-·low_disruption | 6878 | ··-·low_disruption |
| 6874 | ··-·medium_severity | 6879 | ··-·medium_severity |
| 6875 | ··-·no_reboot_needed | 6880 | ··-·no_reboot_needed |
| 6876 | ··-·package_pam_pwquality_installed | 6881 | ··-·package_pam_pwquality_installed |
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6878 | [[packages]] | ||
| 6879 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 29914/35338 bytes (84.65%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15116, 82 lines modified | Offset 15116, 82 lines modified | ||
| 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b120:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b130:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b140:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b150:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b160:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b170:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b180:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b190:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b1a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b200:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b210:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b220:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b120:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b130:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b140:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b150:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b160:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b170:·6964·6d32·3930·3222·3e3c·7072·653e·3c63··idm2902"><pre><c | |||
| 0003b180:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b190:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b1a0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b1b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b1c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b200:·2369·646d·3239·3033·2220·7461·6269·6e64··#idm2903"·tabind | |||
| 0003b210:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b220:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b230:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b240:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b250:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b260:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b270:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b280:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b290:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b2a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b2b0:·6964·6d32·3930·3322·3e3c·7461·626c·6520··idm2903"><table· | |||
| 0003b2c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b2d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b2e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b300:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b310:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b330:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b340:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b350:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b360:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b370:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b380:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b390:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b3a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b3b0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b3c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b3d0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b3e0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b3f0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b400:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b410:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b420:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b430:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b440:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b450:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b460:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b470:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b480:·5354·4947·2d55·4254·552d·3232·2d36·3531··STIG-UBTU-22-651 | |||
| 0003b490:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b4a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b4b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b4c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b4d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b250:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b260:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b270:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b280:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b290:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b2a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b2b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b2c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b2d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b2e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b2f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b300:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b310:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b320:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b330:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b340:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b350:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b360:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b370:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b380:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b390:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b3a0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b3b0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b3c0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b | 0003b4e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003b4f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 416130/427360 bytes (97.37%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 14 lines modified | Offset 124, 19 lines modified | ||
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 128 | ············_\x8c_\x8i_\x8s············1.3.1 | 128 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 140 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 141 | ··package: |
| Offset 146, 19 lines modified | Offset 151, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1961, 14 lines modified | Offset 1961, 19 lines modified | ||
| 1961 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1961 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1962 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1962 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1963 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1963 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1964 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1964 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1965 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1965 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1966 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1966 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1967 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1967 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1968 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1969 | [[packages]] | ||
| 1970 | name·=·"sudo" | ||
| 1971 | version·=·"*" | ||
| 1968 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1972 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1969 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1973 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1970 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1974 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1971 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1975 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1972 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1976 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1973 | -·name:·Ensure·sudo·is·installed | 1977 | -·name:·Ensure·sudo·is·installed |
| 1974 | ··package: | 1978 | ··package: |
| Offset 1980, 19 lines modified | Offset 1985, 14 lines modified | ||
| 1980 | ··-·PCI-DSSv4-2.2.6 | 1985 | ··-·PCI-DSSv4-2.2.6 |
| 1981 | ··-·enable_strategy | 1986 | ··-·enable_strategy |
| 1982 | ··-·low_complexity | 1987 | ··-·low_complexity |
| 1983 | ··-·low_disruption | 1988 | ··-·low_disruption |
| 1984 | ··-·medium_severity | 1989 | ··-·medium_severity |
| 1985 | ··-·no_reboot_needed | 1990 | ··-·no_reboot_needed |
| 1986 | ··-·package_sudo_installed | 1991 | ··-·package_sudo_installed |
| 1987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1988 | [[packages]] | ||
| 1989 | name·=·"sudo" | ||
| 1990 | version·=·"*" | ||
| 1991 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1992 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1992 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1993 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1993 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1994 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1994 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1995 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1995 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1996 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1996 | #·Remediation·is·applicable·only·in·certain·platforms | 1997 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1997 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1998 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7430, 14 lines modified | Offset 7430, 19 lines modified | ||
| 7430 | ············attacks·on·the·system. | 7430 | ············attacks·on·the·system. |
| 7431 | Severity: ··medium | 7431 | Severity: ··medium |
| 7432 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7432 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7433 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7433 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7434 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7434 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7435 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7435 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7436 | ············_\x8c_\x8i_\x8s····5.4.1 | 7436 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7438 | [[packages]] | ||
| 7439 | name·=·"libpam-pwquality" | ||
| 7440 | version·=·"*" | ||
| 7437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7442 | -·name:·Gather·the·package·facts | 7446 | -·name:·Gather·the·package·facts |
| 7443 | ··package_facts: | 7447 | ··package_facts: |
| Offset 7460, 19 lines modified | Offset 7465, 14 lines modified | ||
| 7460 | ··-·DISA-STIG-UBTU-22-215010 | 7465 | ··-·DISA-STIG-UBTU-22-215010 |
| 7461 | ··-·enable_strategy | 7466 | ··-·enable_strategy |
| 7462 | ··-·low_complexity | 7467 | ··-·low_complexity |
| 7463 | ··-·low_disruption | 7468 | ··-·low_disruption |
| 7464 | ··-·medium_severity | 7469 | ··-·medium_severity |
| 7465 | ··-·no_reboot_needed | 7470 | ··-·no_reboot_needed |
| 7466 | ··-·package_pam_pwquality_installed | 7471 | ··-·package_pam_pwquality_installed |
| 7467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7468 | [[packages]] | ||
| 7469 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 40131/45545 bytes (88.11%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·313 | 00037d40:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15111, 82 lines modified | Offset 15111, 82 lines modified | ||
| 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | ||
| 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b0e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b120:·3d22·6964·6d32·3930·3222·3e3c·7461·626c··="idm2902"><tabl | |||
| 0003b130:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b140:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b150:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b160:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b170:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b190:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b1a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003b0e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b120:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b130:·3930·3222·3e3c·7072·653e·3c63·6f64·653e··902"><pre><code> | |||
| 0003b140:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b150:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b160:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b170:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b180:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b190:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b1b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1c0:·3239·3033·2220·7461·6269·6e64·6578·3d22··2903"·tabindex=" | |||
| 0003b1d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b1e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b1f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b200:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b210:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b220:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b230:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b240:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b250:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b260:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b270:·3930·3322·3e3c·7461·626c·6520·636c·6173··903"><table·clas | |||
| 0003b280:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b290:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b2d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b2f0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b300:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b310:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b | 0003b320:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b330:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b340:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b350:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b360:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b370:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b380:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b390:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b3a0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b3b0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b3c0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b3d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b3e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b3f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b400:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b410:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b420:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b430:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b440:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b450:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b460:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b470:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b480:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b490:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b4a0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b4b0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b4c0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b4d0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b4e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b4f0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b500:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b210:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b220:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b230:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b240:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b250:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b260:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b270:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b280:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b290:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b2a0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b2b0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b2c0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b2d0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b2e0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b2f0:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b300:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b310:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b320:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| Max diff block lines reached; 415992/427222 bytes (97.37%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1880, 14 lines modified | Offset 1880, 19 lines modified | ||
| 1880 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1880 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1881 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1881 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1882 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1882 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1883 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1883 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1884 | ············_\x8c_\x8i_\x8s·····5.3.1 | 1884 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 1885 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1885 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1886 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1886 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1888 | [[packages]] | ||
| 1889 | name·=·"sudo" | ||
| 1890 | version·=·"*" | ||
| 1887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1888 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1892 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1889 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1893 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1890 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1894 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1891 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1895 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1892 | -·name:·Ensure·sudo·is·installed | 1896 | -·name:·Ensure·sudo·is·installed |
| 1893 | ··package: | 1897 | ··package: |
| Offset 1899, 19 lines modified | Offset 1904, 14 lines modified | ||
| 1899 | ··-·PCI-DSSv4-2.2.6 | 1904 | ··-·PCI-DSSv4-2.2.6 |
| 1900 | ··-·enable_strategy | 1905 | ··-·enable_strategy |
| 1901 | ··-·low_complexity | 1906 | ··-·low_complexity |
| 1902 | ··-·low_disruption | 1907 | ··-·low_disruption |
| 1903 | ··-·medium_severity | 1908 | ··-·medium_severity |
| 1904 | ··-·no_reboot_needed | 1909 | ··-·no_reboot_needed |
| 1905 | ··-·package_sudo_installed | 1910 | ··-·package_sudo_installed |
| 1906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1907 | [[packages]] | ||
| 1908 | name·=·"sudo" | ||
| 1909 | version·=·"*" | ||
| 1910 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1911 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1911 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1912 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1912 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1913 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1913 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1914 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1914 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1915 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1915 | #·Remediation·is·applicable·only·in·certain·platforms | 1916 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1916 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1917 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7349, 14 lines modified | Offset 7349, 19 lines modified | ||
| 7349 | ············attacks·on·the·system. | 7349 | ············attacks·on·the·system. |
| 7350 | Severity: ··medium | 7350 | Severity: ··medium |
| 7351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7352 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7352 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7353 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7353 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7354 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7354 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7355 | ············_\x8c_\x8i_\x8s····5.4.1 | 7355 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7357 | [[packages]] | ||
| 7358 | name·=·"libpam-pwquality" | ||
| 7359 | version·=·"*" | ||
| 7356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7361 | -·name:·Gather·the·package·facts | 7365 | -·name:·Gather·the·package·facts |
| 7362 | ··package_facts: | 7366 | ··package_facts: |
| Offset 7379, 19 lines modified | Offset 7384, 14 lines modified | ||
| 7379 | ··-·DISA-STIG-UBTU-22-215010 | 7384 | ··-·DISA-STIG-UBTU-22-215010 |
| 7380 | ··-·enable_strategy | 7385 | ··-·enable_strategy |
| 7381 | ··-·low_complexity | 7386 | ··-·low_complexity |
| 7382 | ··-·low_disruption | 7387 | ··-·low_disruption |
| 7383 | ··-·medium_severity | 7388 | ··-·medium_severity |
| 7384 | ··-·no_reboot_needed | 7389 | ··-·no_reboot_needed |
| 7385 | ··-·package_pam_pwquality_installed | 7390 | ··-·package_pam_pwquality_installed |
| 7386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7387 | [[packages]] | ||
| 7388 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 40131/45555 bytes (88.09%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 20022, 77 lines modified | Offset 20022, 77 lines modified | ||
| 0004e350:·6172·6765·743d·2223·6964·6d31·3132·3736··arget="#idm11276 | 0004e350:·6172·6765·743d·2223·6964·6d31·3132·3736··arget="#idm11276 | ||
| 0004e360:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004e360:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004e370:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004e370:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004e380:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004e380:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004e390:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004e390:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004e3a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004e3a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004e3b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004e3b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004e3c0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0004e3d0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0004e3e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0004e3f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0004e400:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0004e410:·3d22·6964·6d31·3132·3736·223e·3c70·7265··="idm11276"><pre | |||
| 0004e420:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0004e430:·6573·5d5d·0a6e·616d·6520·3d20·2272·7379··es]].name·=·"rsy | |||
| 0004e440:·736c·6f67·220a·7665·7273·696f·6e20·3d20··slog".version·=· | |||
| 0004e450:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0004e460:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004e470:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0004e3c0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0004e3d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004e3e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004e3f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004e400:·7365·2220·6964·3d22·6964·6d31·3132·3736··se"·id="idm11276 | |||
| 0004e410:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0004e420:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0004e430:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0004e440:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0004e450:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0004e460:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0004e470:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004e480:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004e490:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004e4a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0004e4b0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0004e4c0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0004e4d0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0004e4e0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0004e4f0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0004e500:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0004e510:·3a20·456e·7375·7265·2072·7379·736c·6f67··:·Ensure·rsyslog | |||
| 0004e520:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0004e530:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0004e540:·653a·2072·7379·736c·6f67·0a20·2020·2073··e:·rsyslog.····s | |||
| 0004e550:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0004e560:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0004e570:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0004e580:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0004e590:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0004e5a0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0004e5b0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0004e5c0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0004e5d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0004e5e0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0004e5f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0004e600:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0004e610:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0004e620:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0004e630:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0004e640:·202d·2070·6163·6b61·6765·5f72·7379·736c···-·package_rsysl | |||
| 0004e650:·6f67·5f69·6e73·7461·6c6c·6564·0a3c·2f63··og_installed.</c | |||
| 0004e660:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0004e670:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0004e680:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0004e690:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0004e | 0004e480:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0004e6b0:·6964·6d31·3132·3737·2220·7461·6269·6e64··idm11277"·tabind | |||
| 0004e6c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0004e6d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0004e6e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0004e6f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0004e700:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0004e710:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0004e720:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0004e730:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004e740:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004e750:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004e760:·6170·7365·2220·6964·3d22·6964·6d31·3132··apse"·id="idm112 | |||
| 0004e770:·3737·223e·3c70·7265·3e3c·636f·6465·3e0a··77"><pre><code>. | |||
| 0004e780:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0004e790:·6520·3d20·2272·7379·736c·6f67·220a·7665··e·=·"rsyslog".ve | |||
| 0004e | 0004e490:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0004e4a0:·7267·6574·3d22·2369·646d·3131·3237·3722··rget="#idm11277" | |||
| 0004e4b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0004e4c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0004e4d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0004e4e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0004e4f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0004e500:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0004e510:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0004e520:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004e530:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0004e540:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0004e550:·6522·2069·643d·2269·646d·3131·3237·3722··e"·id="idm11277" | |||
| 0004e560:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0004e570:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0004e580:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0004e590:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0004e5a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0004e5b0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0004e5c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004e5d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0004e5e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004e5f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004e600:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0004e610:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0004e620:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0004e630:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0004e640:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0004e650:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0004e660:·2045·6e73·7572·6520·7273·7973·6c6f·6720···Ensure·rsyslog· | |||
| Max diff block lines reached; 135730/146132 bytes (92.88%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1569, 14 lines modified | Offset 1569, 19 lines modified | ||
| 1569 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1569 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1570 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1570 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1571 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1571 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1572 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1572 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1574 | ···························SRG-OS-000480-GPOS-00227 | 1574 | ···························SRG-OS-000480-GPOS-00227 |
| 1575 | ············_\x8c_\x8i_\x8s············4.2.2.1 | 1575 | ············_\x8c_\x8i_\x8s············4.2.2.1 |
| 1576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1577 | [[packages]] | ||
| 1578 | name·=·"rsyslog" | ||
| 1579 | version·=·"*" | ||
| 1576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1581 | -·name:·Ensure·rsyslog·is·installed | 1585 | -·name:·Ensure·rsyslog·is·installed |
| 1582 | ··package: | 1586 | ··package: |
| Offset 1588, 19 lines modified | Offset 1593, 14 lines modified | ||
| 1588 | ··-·NIST-800-53-CM-6(a) | 1593 | ··-·NIST-800-53-CM-6(a) |
| 1589 | ··-·enable_strategy | 1594 | ··-·enable_strategy |
| 1590 | ··-·low_complexity | 1595 | ··-·low_complexity |
| 1591 | ··-·low_disruption | 1596 | ··-·low_disruption |
| 1592 | ··-·medium_severity | 1597 | ··-·medium_severity |
| 1593 | ··-·no_reboot_needed | 1598 | ··-·no_reboot_needed |
| 1594 | ··-·package_rsyslog_installed | 1599 | ··-·package_rsyslog_installed |
| 1595 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1596 | [[packages]] | ||
| 1597 | name·=·"rsyslog" | ||
| 1598 | version·=·"*" | ||
| 1599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1600 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1601 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1601 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1602 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1602 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1603 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1603 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1604 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1604 | #·Remediation·is·applicable·only·in·certain·platforms | 1605 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1605 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1606 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1645, 14 lines modified | Offset 1645, 18 lines modified | ||
| 1645 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1645 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1646 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1646 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1647 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1647 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1648 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1648 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1649 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1649 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1650 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-652010 | 1650 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-652010 |
| 1651 | ············_\x8c_\x8i_\x8s············4.2.2.2 | 1651 | ············_\x8c_\x8i_\x8s············4.2.2.2 |
| 1652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1653 | [customizations.services] | ||
| 1654 | enabled·=·["rsyslog"] | ||
| 1652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1653 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1656 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1654 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1657 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1655 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1658 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1656 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1659 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1657 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1660 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1658 | ··block: | 1661 | ··block: |
| Offset 1677, 18 lines modified | Offset 1681, 14 lines modified | ||
| 1677 | ··-·NIST-800-53-CM-6(a) | 1681 | ··-·NIST-800-53-CM-6(a) |
| 1678 | ··-·enable_strategy | 1682 | ··-·enable_strategy |
| 1679 | ··-·low_complexity | 1683 | ··-·low_complexity |
| 1680 | ··-·low_disruption | 1684 | ··-·low_disruption |
| 1681 | ··-·medium_severity | 1685 | ··-·medium_severity |
| 1682 | ··-·no_reboot_needed | 1686 | ··-·no_reboot_needed |
| 1683 | ··-·service_rsyslog_enabled | 1687 | ··-·service_rsyslog_enabled |
| 1684 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1685 | [customizations.services] | ||
| 1686 | enabled·=·["rsyslog"] | ||
| 1687 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1688 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1688 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1689 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1689 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1690 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1690 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1691 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1691 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1692 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1692 | #·Remediation·is·applicable·only·in·certain·platforms | 1693 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1693 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1694 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3398, 14 lines modified | Offset 3398, 18 lines modified | ||
| 3398 | $·sudo·systemctl·mask·--now·apport.service | 3398 | $·sudo·systemctl·mask·--now·apport.service |
| 3399 | ············The·Apport·service·modifies·the·kernel·fs.suid_dumpable | 3399 | ············The·Apport·service·modifies·the·kernel·fs.suid_dumpable |
| 3400 | Rationale:··configuration·at·runtime·which·prevents·other·hardening·from·being | 3400 | Rationale:··configuration·at·runtime·which·prevents·other·hardening·from·being |
| 3401 | ············persistent.·Disabling·the·service·prevents·this·behavior. | 3401 | ············persistent.·Disabling·the·service·prevents·this·behavior. |
| 3402 | Severity: ··unknown | 3402 | Severity: ··unknown |
| 3403 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_apport_disabled | 3403 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_apport_disabled |
| 3404 | References:·_\x8c_\x8i_\x8s·1.5.3 | 3404 | References:·_\x8c_\x8i_\x8s·1.5.3 |
| 3405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3406 | [customizations.services] | ||
| 3407 | masked·=·["apport"] | ||
| 3405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3408 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3409 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3410 | -·name:·Gather·the·package·facts | 3413 | -·name:·Gather·the·package·facts |
| 3411 | ··package_facts: | 3414 | ··package_facts: |
| Offset 3477, 37 lines modified | Offset 3481, 14 lines modified | ||
| 3477 | ··tags: | 3481 | ··tags: |
| 3478 | ··-·disable_strategy | 3482 | ··-·disable_strategy |
| 3479 | ··-·low_complexity | 3483 | ··-·low_complexity |
| 3480 | ··-·low_disruption | 3484 | ··-·low_disruption |
| 3481 | ··-·no_reboot_needed | 3485 | ··-·no_reboot_needed |
| 3482 | ··-·service_apport_disabled | 3486 | ··-·service_apport_disabled |
| 3483 | ··-·unknown_severity | 3487 | ··-·unknown_severity |
| 3484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3485 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3486 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 3487 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 3488 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3489 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 3490 | kind:·MachineConfig | ||
| Max diff block lines reached; 11070/17335 bytes (63.86%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e00:·2032·3032·3 | 00037e00:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15065, 82 lines modified | Offset 15065, 82 lines modified | ||
| 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | ||
| 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003adf0:·656d·6564·6961·7469·6f6e·204 | 0003adf0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003ae00:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ae10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae40:·646d·3239·3032·223e·3c74·6162·6c65·2063··dm2902"><table·c | |||
| 0003ae50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ae60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ae70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ae80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ae90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003aea0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aeb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aec0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003aed0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aee0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003aef0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003af00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a | 0003ae00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003ae10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae40:·7073·6522·2069·643d·2269·646d·3239·3032··pse"·id="idm2902 | |||
| 0003ae50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ae60:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ae70:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ae80:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ae90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003aea0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003aeb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003aec0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003aed0:·2d74·6172·6765·743d·2223·6964·6d32·3930··-target="#idm290 | |||
| 0003aee0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003aef0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003af00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003af10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003af20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003af30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003af40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003af50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af80:·7073·6522·2069·643d·2269·646d·3239·3033··pse"·id="idm2903 | |||
| 0003af90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003afa0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003afb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003afc0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003afd0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003afe0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003aff0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b000:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b010:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b020:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b030:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003 | 0003b040:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b050:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b060:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b070:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b080:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b090:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b0a0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b0b0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b0c0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b0d0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b0e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b0f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b100:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b110:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b120:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b130:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b140:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b150:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b160:·5455·2d32·322d·3635·3130·3130·0a20·202d··TU-22-651010.··- | |||
| 0003b170:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b180:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b190:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b1a0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b1b0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b1c0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b1d0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b1e0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b1f0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b200:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b210:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b220:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003af30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003af40:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003af50:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003af60:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003af70:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003af80:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003af90:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003afa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003afb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003afc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003afd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003afe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b000:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b010:·5449·472d·5542·5455·2d32·322d·3635·3130··TIG-UBTU-22-6510 | |||
| 0003b020:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b030:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b040:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b050:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| Max diff block lines reached; 212786/223878 bytes (95.05%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R1 | 42 | ··············Guide·(STIG)·V1R1 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 117 | ············_\x8c_\x8i_\x8s············1.3.1 | 117 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 130 | ··package: |
| Offset 135, 19 lines modified | Offset 140, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 152 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7852, 14 lines modified | Offset 7852, 19 lines modified | ||
| 7852 | ············construction·configuration·and·has·the·ability·to·limit·brute-force·attacks·on·the·system. | 7852 | ············construction·configuration·and·has·the·ability·to·limit·brute-force·attacks·on·the·system. |
| 7853 | Severity: ··medium | 7853 | Severity: ··medium |
| 7854 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7854 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7855 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7855 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7856 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7856 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7857 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7857 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7858 | ············_\x8c_\x8i_\x8s····5.4.1 | 7858 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7860 | [[packages]] | ||
| 7861 | name·=·"libpam-pwquality" | ||
| 7862 | version·=·"*" | ||
| 7859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7864 | -·name:·Gather·the·package·facts | 7868 | -·name:·Gather·the·package·facts |
| 7865 | ··package_facts: | 7869 | ··package_facts: |
| Offset 7882, 19 lines modified | Offset 7887, 14 lines modified | ||
| 7882 | ··-·DISA-STIG-UBTU-22-215010 | 7887 | ··-·DISA-STIG-UBTU-22-215010 |
| 7883 | ··-·enable_strategy | 7888 | ··-·enable_strategy |
| 7884 | ··-·low_complexity | 7889 | ··-·low_complexity |
| 7885 | ··-·low_disruption | 7890 | ··-·low_disruption |
| 7886 | ··-·medium_severity | 7891 | ··-·medium_severity |
| 7887 | ··-·no_reboot_needed | 7892 | ··-·no_reboot_needed |
| 7888 | ··-·package_pam_pwquality_installed | 7893 | ··-·package_pam_pwquality_installed |
| 7889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7890 | [[packages]] | ||
| 7891 | name·=·"libpam-pwquality" | ||
| 7892 | version·=·"*" | ||
| 7893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7898 | #·Remediation·is·applicable·only·in·certain·platforms | 7899 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7899 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- | 7900 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep·- |
| Offset 8265, 14 lines modified | Offset 8265, 19 lines modified | ||
| 8265 | ············implemented,·once·invoked,·the·session·lock·must·remain·in·place·until·the·user | 8265 | ············implemented,·once·invoked,·the·session·lock·must·remain·in·place·until·the·user |
| 8266 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. | 8266 | ············reauthenticates.·No·other·activity·aside·from·reauthentication·must·unlock·the·system. |
| 8267 | Severity: ··medium | 8267 | Severity: ··medium |
| 8268 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed | 8268 | Rule·ID:····xccdf_org.ssgproject.content_rule_vlock_installed |
| 8269 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000056,·CCI-000058,·CCI-000060 | 8269 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000056,·CCI-000058,·CCI-000060 |
| 8270 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 8270 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 8271 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-412025 | 8271 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-412025 |
| 8272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8273 | [[packages]] | ||
| 8274 | name·=·"vlock" | ||
| 8275 | version·=·"*" | ||
| 8272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8277 | -·name:·Ensure·vlock·is·installed | 8281 | -·name:·Ensure·vlock·is·installed |
| 8278 | ··package: | 8282 | ··package: |
| Offset 8283, 19 lines modified | Offset 8288, 14 lines modified | ||
| 8283 | ··-·DISA-STIG-UBTU-22-412025 | 8288 | ··-·DISA-STIG-UBTU-22-412025 |
| 8284 | ··-·enable_strategy | 8289 | ··-·enable_strategy |
| 8285 | ··-·low_complexity | 8290 | ··-·low_complexity |
| 8286 | ··-·low_disruption | 8291 | ··-·low_disruption |
| 8287 | ··-·medium_severity | 8292 | ··-·medium_severity |
| 8288 | ··-·no_reboot_needed | 8293 | ··-·no_reboot_needed |
| 8289 | ··-·vlock_installed | 8294 | ··-·vlock_installed |
| 8290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8291 | [[packages]] | ||
| 8292 | name·=·"vlock" | ||
| Max diff block lines reached; 23190/28840 bytes (80.41%) of diff not shown. | |||
| Offset 21, 25 lines modified | Offset 21, 25 lines modified | ||
| 21 | ····<ds:checks> | 21 | ····<ds:checks> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1604-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1604-oval.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1604-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1604-oval.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1604-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1604-ocil.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1604-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1604-ocil.xml"/> |
| 24 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1604-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1604-cpe-oval.xml"/> | 24 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1604-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1604-cpe-oval.xml"/> |
| 25 | ······<ds:component-ref·id="scap_org.open-scap_cref_-ubuntu-security-oval-com.ubuntu.xenial.cve.oval.xml"·xlink:href="https://people.canonical.com/~ubuntu-security/oval/com.ubuntu.xenial.cve.oval.xml"/> | 25 | ······<ds:component-ref·id="scap_org.open-scap_cref_-ubuntu-security-oval-com.ubuntu.xenial.cve.oval.xml"·xlink:href="https://people.canonical.com/~ubuntu-security/oval/com.ubuntu.xenial.cve.oval.xml"/> |
| 26 | ····</ds:checks> | 26 | ····</ds:checks> |
| 27 | ··</ds:data-stream> | 27 | ··</ds:data-stream> |
| 28 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-cpe-dictionary.xml"·timestamp="2024-11-0 | 28 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 29 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 29 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 30 | ······<cpe-dict:cpe-item·name="cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~"> | 30 | ······<cpe-dict:cpe-item·name="cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~"> |
| 31 | ········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·16.04·(Xenial)</cpe-dict:title> | 31 | ········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·16.04·(Xenial)</cpe-dict:title> |
| 32 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1604:def:1</cpe-dict:check> | 32 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1604:def:1</cpe-dict:check> |
| 33 | ······</cpe-dict:cpe-item> | 33 | ······</cpe-dict:cpe-item> |
| 34 | ····</cpe-dict:cpe-list> | 34 | ····</cpe-dict:cpe-list> |
| 35 | ··</ds:component> | 35 | ··</ds:component> |
| 36 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-xccdf.xml"·timestamp="2024-11-0 | 36 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 37 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 37 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 38 | ······<xccdf-1.2:status·date="202 | 38 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 39 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> | 39 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> |
| 40 | ······<xccdf-1.2:description> | 40 | ······<xccdf-1.2:description> |
| 41 | ········This·guide·presents·a·catalog·of·security-relevant | 41 | ········This·guide·presents·a·catalog·of·security-relevant |
| 42 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of | 42 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of |
| 43 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 43 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 44 | in·order·to·support·security·automation.··The·SCAP·content·is | 44 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 45 | is·available·in·the | 45 | is·available·in·the |
| Offset 107, 157 lines modified | Offset 107, 157 lines modified | ||
| 107 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 110 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 110 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 111 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 111 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 113 | ······<cpe-lang:platform-specification> | 113 | ······<cpe-lang:platform-specification> |
| 114 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 115 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 116 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 117 | ··········</cpe-lang:logical-test> | ||
| 118 | ········</cpe-lang:platform> | ||
| 119 | ········<cpe-lang:platform·id="package_a | 114 | ········<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 118 | ············</cpe-lang:logical-test> | ||
| 119 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 120 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 121 | ············</cpe-lang:logical-test> | ||
| 122 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 123 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 124 | ········<cpe-lang:platform·id="package_ | 124 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ··········</cpe-lang:logical-test> | 128 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 129 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id=" | 130 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 132 | ··········</cpe-lang:logical-test> | 133 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 134 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 135 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 137 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 138 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 138 | ············</cpe-lang:logical-test> | 139 | ············</cpe-lang:logical-test> |
| 139 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 140 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 140 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 141 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 141 | ············</cpe-lang:logical-test> | 142 | ············</cpe-lang:logical-test> |
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 142 | ··········</cpe-lang:logical-test> | 144 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 145 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id=" | 146 | ········<cpe-lang:platform·id="grub2"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 148 | ············</cpe-lang:logical-test> | ||
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ············ | 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 151 | ············</cpe-lang:logical-test> | ||
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 153 | ··········</cpe-lang:logical-test> | 149 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 150 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id="aa | 151 | ········<cpe-lang:platform·id="package_iptables"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 158 | ··········</cpe-lang:logical-test> | 154 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 155 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id="machine"> | 156 | ········<cpe-lang:platform·id="machine"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 158 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 159 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 160 | ········</cpe-lang:platform> |
| 161 | ········<cpe-lang:platform·id="package_pam"> | ||
| 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 164 | ··········</cpe-lang:logical-test> | ||
| 165 | ········</cpe-lang:platform> | ||
| 165 | ········<cpe-lang:platform·id="not_package_ | 166 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 168 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 168 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 169 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 169 | ············</cpe-lang:logical-test> | 170 | ············</cpe-lang:logical-test> |
| 170 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 171 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 171 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 172 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 172 | ············</cpe-lang:logical-test> | 173 | ············</cpe-lang:logical-test> |
| 173 | ··········</cpe-lang:logical-test> | 174 | ··········</cpe-lang:logical-test> |
| 174 | ········</cpe-lang:platform> | 175 | ········</cpe-lang:platform> |
| 175 | ········<cpe-lang:platform·id="package_systemd"> | ||
| 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 178 | ··········</cpe-lang:logical-test> | ||
| 179 | ········</cpe-lang:platform> | ||
| 180 | ········<cpe-lang:platform·id="package_gdm"> | ||
| 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 183 | ··········</cpe-lang:logical-test> | ||
| 184 | ········</cpe-lang:platform> | ||
| 185 | ········<cpe-lang:platform·id="package_logrotate"> | 176 | ········<cpe-lang:platform·id="package_logrotate"> |
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 188 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| 189 | ········</cpe-lang:platform> | 180 | ········</cpe-lang:platform> |
| 190 | ········<cpe-lang:platform·id="package_ | 181 | ········<cpe-lang:platform·id="package_ntp"> |
| 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 193 | ··········</cpe-lang:logical-test> | 184 | ··········</cpe-lang:logical-test> |
| 194 | ········</cpe-lang:platform> | 185 | ········</cpe-lang:platform> |
| 195 | ········<cpe-lang:platform·id="package_n | 186 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| Max diff block lines reached; 773628/786244 bytes (98.40%) of diff not shown. | |||
| Offset 3, 3457 lines modified | Offset 3, 3457 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_retpoline_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Avoid·speculative·indirect·branches·in·kernel</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_retpoline_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_table_isolation_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·Rsyslog·Authenticates·Off-Loaded·Audit·Records</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-harden_ssh_client_crypto_policy_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_syslog_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Permissions·on·/var/log/syslog·File</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_vdso_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable· | 35 | ······<ocil:title>Disable·the·32-bit·vDSO</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_vdso_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-a | 40 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Configur | 41 | ······<ocil:title>Disallow·Configuration·to·Bypass·Password·Requirements·for·Privilege·Escalation</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-disallow_bypass_password_sudo_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-security_patches_up_to_date_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_local_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·Accepting·Packets·Routed·Between·Local·Interfaces</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_local_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_gshadow_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·Permissions·on·gshadow·File</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-r | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_slub_debug_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>En | 59 | ······<ocil:title>Enable·SLUB·debugging·support</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-r | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_slub_debug_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_compression_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Disable·Compression·Or·Set·Compression·to·delayed</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_compression_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership | 70 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_ownership_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·User</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-file_ownership | 73 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_ownership_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nodev_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Add·nodev·Option·to·/dev/shm</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nodev_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Hardlinks</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_hardlinks_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_remote_loghost_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·Logs·Sent·To·Remote·Host</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_remote_loghost_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-package_postfix_installed_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_brk_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·compatibility·with·brk()</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_brk_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_sg_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Enable·checks·on·scatter-gather·(SG)·table·operations</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_sg_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | ||
| 117 | ····</ocil:questionnaire> | ||
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> | ||
| 119 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> | ||
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 667043/679166 bytes (98.22%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 157 lines modified | Offset 72, 157 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 79 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_audit"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 87 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_ | 89 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 103 | ········</cpe-lang:logical-test> | 104 | ········</cpe-lang:logical-test> |
| 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 106 | ········</cpe-lang:logical-test> | 107 | ········</cpe-lang:logical-test> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="grub2"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ········ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 118 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="aa | 116 | ····<cpe-lang:platform·id="package_iptables"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="machine"> | 121 | ····<cpe-lang:platform·id="machine"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_pam"> | ||
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | ||
| 130 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="not_package_ | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 134 | ········</cpe-lang:logical-test> | 135 | ········</cpe-lang:logical-test> |
| 135 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 136 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 137 | ········</cpe-lang:logical-test> | 138 | ········</cpe-lang:logical-test> |
| 138 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 150 | ····<cpe-lang:platform·id="package_logrotate"> | 141 | ····<cpe-lang:platform·id="package_logrotate"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_ | 146 | ····<cpe-lang:platform·id="package_ntp"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="package_n | 151 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 163 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 158 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 166 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| Max diff block lines reached; 58936/71385 bytes (82.56%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1804-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1804-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1804-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1804-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1804-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1804-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1804-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1804-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1804-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1804-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ubuntu1804-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ubuntu1804-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1804-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1804-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·18.04·(Bionic·Beaver)</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·18.04·(Bionic·Beaver)</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1804:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1804:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1804-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1804-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of | 40 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 105, 181 lines modified | Offset 105, 181 lines modified | ||
| 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 111 | ······<cpe-lang:platform-specification> | 111 | ······<cpe-lang:platform-specification> |
| 112 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 115 | ··········</cpe-lang:logical-test> | ||
| 116 | ········</cpe-lang:platform> | ||
| 117 | ········<cpe-lang:platform·id="package_a | 112 | ········<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 120 | ··········</cpe-lang:logical-test> | ||
| 121 | ········</cpe-lang:platform> | ||
| 122 | ········<cpe-lang:platform·id="package_pam"> | ||
| 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 125 | ··········</cpe-lang:logical-test> | ||
| 126 | ········</cpe-lang:platform> | ||
| 127 | ········<cpe-lang:platform·id="machine_and_mount_var-tmp"> | ||
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 114 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 115 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 116 | ············</cpe-lang:logical-test> | ||
| 117 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 118 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 119 | ············</cpe-lang:logical-test> | ||
| 131 | ··········</cpe-lang:logical-test> | 120 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 121 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="machine_and_package_ | 122 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 137 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id=" | 128 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 133 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 135 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 147 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 136 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 148 | ············</cpe-lang:logical-test> | 137 | ············</cpe-lang:logical-test> |
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 138 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 150 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 139 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 151 | ············</cpe-lang:logical-test> | 140 | ············</cpe-lang:logical-test> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 152 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 153 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 154 | ········<cpe-lang:platform·id=" | 144 | ········<cpe-lang:platform·id="machine_and_mount_home"> |
| 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ············ | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 158 | ············</cpe-lang:logical-test> | ||
| 159 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 160 | ············ | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 161 | ············</cpe-lang:logical-test> | ||
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 163 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 150 | ········<cpe-lang:platform·id="grub2"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 168 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id=" | 155 | ········<cpe-lang:platform·id="package_iptables"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 174 | ··········</cpe-lang:logical-test> | 158 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 159 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id="machine"> | 160 | ········<cpe-lang:platform·id="machine"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 179 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id="package_pam"> | ||
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 168 | ··········</cpe-lang:logical-test> | ||
| 169 | ········</cpe-lang:platform> | ||
| 181 | ········<cpe-lang:platform·id="not_package_ | 170 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 172 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 184 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 173 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 185 | ············</cpe-lang:logical-test> | 174 | ············</cpe-lang:logical-test> |
| 186 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 175 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 187 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 176 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 188 | ············</cpe-lang:logical-test> | 177 | ············</cpe-lang:logical-test> |
| 189 | ··········</cpe-lang:logical-test> | 178 | ··········</cpe-lang:logical-test> |
| 190 | ········</cpe-lang:platform> | 179 | ········</cpe-lang:platform> |
| 191 | ········<cpe-lang:platform·id="package_systemd"> | ||
| 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 194 | ··········</cpe-lang:logical-test> | ||
| 195 | ········</cpe-lang:platform> | ||
| Max diff block lines reached; 814702/827970 bytes (98.40%) of diff not shown. | |||
| Offset 3, 2589 lines modified | Offset 3, 2589 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-set_ip6tables_default_rule_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Set·Default·ip6tables·Policy·for·Incoming·Packets</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-set_ip6tables_default_rule_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-selinux_not_disabled_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·SELinux·is·Not·Disabled</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-selinux_not_disabled_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_retpoline_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Avoid·speculative·indirect·branches·in·kernel</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_retpoline_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_backtraces_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Disable·core·dump·backtraces</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_backtraces_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_legacy_ptys_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·legacy·(BSD)·PTY·support</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_legacy_ptys_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify· | 53 | ······<ocil:title>Verify·All·Account·Password·Hashes·are·Shadowed</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_all_shadowed_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_acpi_custom_method_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_logon_fail_delay_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·the·Logon·Failure·Delay·is·Set·Correctly·in·login.defs</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_logon_fail_delay_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-s | 64 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyslog_enabled_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Enable·rsyslog·Service</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-s | 67 | ········<ocil:test_action_ref>ocil:ssg-service_rsyslog_enabled_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-service_cron_enabled_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Enable·cron·Service</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-service_cron_enabled_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_memory_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Randomize·the·kernel·memory·sections</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_randomize_memory_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_cramfs_disabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Disable·Mounting·of·cramfs</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_ | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_cramfs_disabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_action_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_ufw_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·ufw·Enabled</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-service_ufw_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_shutdown_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ena | 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·shutdown</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_shutdown_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lchown_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lchown</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lchown_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_audit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Ensure·/var/log/audit·Located·On·Separate·Partition</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_acpi_custom_method_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Do·not·allow·ACPI·methods·to·be·inserted/replaced·at·run·time</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_acpi_custom_method_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-package_nss-tools_installed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Ensure·nss-tools·is·installed</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-package_nss-tools_installed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_idle_timeout_ocil:questionnaire:1"> |
| Max diff block lines reached; 699896/712496 bytes (98.23%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 181 lines modified | Offset 72, 181 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 79 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_audit"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="package_pam"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 83 | ········</cpe-lang:logical-test> | ||
| 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 86 | ········</cpe-lang:logical-test> | ||
| 98 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="machine_and_package_ | 89 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 104 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 105 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 106 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 109 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 110 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 111 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 115 | ········</cpe-lang:logical-test> | 104 | ········</cpe-lang:logical-test> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | 107 | ········</cpe-lang:logical-test> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ········ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 125 | ········</cpe-lang:logical-test> | ||
| 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ········ | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | ||
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 130 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id=" | 117 | ····<cpe-lang:platform·id="grub2"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="package_iptables"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="machine"> | 127 | ····<cpe-lang:platform·id="machine"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="package_pam"> | ||
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | ||
| 136 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="not_package_ | 137 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 152 | ········</cpe-lang:logical-test> | 141 | ········</cpe-lang:logical-test> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 155 | ········</cpe-lang:logical-test> | 144 | ········</cpe-lang:logical-test> |
| 156 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | ||
| 162 | ····</cpe-lang:platform> | ||
| 163 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 166 | ······</cpe-lang:logical-test> | ||
| 167 | ····</cpe-lang:platform> | ||
| 168 | ····<cpe-lang:platform·id="package_logrotate"> | 147 | ····<cpe-lang:platform·id="package_logrotate"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_ntp"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| Max diff block lines reached; 65858/78387 bytes (84.02%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_20-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_20-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·20.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·20.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·20.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·20.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 309 lines modified | Offset 72, 309 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_a | 79 | ····<cpe-lang:platform·id="package_apport"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="package_pam"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_p | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_apport:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_ | 84 | ····<cpe-lang:platform·id="package_nftables"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="machine_and_not_osb | 89 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_ | 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 103 | ········</cpe-lang:logical-test> | 93 | ········</cpe-lang:logical-test> |
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 105 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 106 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 107 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | 109 | ········</cpe-lang:logical-test> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | 112 | ········</cpe-lang:logical-test> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> | ||
| 125 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="machine_and_package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | ||
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id="not_s390x_arch"> | ||
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_ufw"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="x86_64_arch"> | ||
| 146 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ········ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | ||
| 159 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 126 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 164 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 165 | ········</cpe-lang:logical-test> | 130 | ········</cpe-lang:logical-test> |
| 166 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 167 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 168 | ········</cpe-lang:logical-test> | 133 | ········</cpe-lang:logical-test> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="aa | 137 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id="machine_and_mount_ | 143 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| Max diff block lines reached; 133033/145380 bytes (91.51%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_22-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_22-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·22.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·22.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·22.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·22.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 327 lines modified | Offset 72, 327 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="package_apport"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_apport:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_ | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="machine_and_not_osb | 101 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 103 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_ | 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 103 | ········</cpe-lang:logical-test> | 105 | ········</cpe-lang:logical-test> |
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 105 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 106 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 107 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 115 | ······</cpe-lang:logical-test> | ||
| 116 | ····</cpe-lang:platform> | ||
| 117 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 120 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | 121 | ········</cpe-lang:logical-test> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | 124 | ········</cpe-lang:logical-test> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> | ||
| 125 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="machine_and_package_ | 127 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | ||
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id="not_s390x_arch"> | ||
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_ufw"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="x86_64_arch"> | ||
| 146 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ········ | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | ||
| 159 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 138 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 164 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 165 | ········</cpe-lang:logical-test> | 142 | ········</cpe-lang:logical-test> |
| 166 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 167 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 168 | ········</cpe-lang:logical-test> | 145 | ········</cpe-lang:logical-test> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 175 | ······</cpe-lang:logical-test> | ||
| 176 | ····</cpe-lang:platform> | ||
| Max diff block lines reached; 137714/150511 bytes (91.50%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1976·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1976·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··12 | 3 | -rw-r--r--···0········0········0··1230916·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 20540, 77 lines modified | Offset 20540, 77 lines modified | ||
| 000503b0:·7461·7267·6574·3d22·2369·646d·3533·3531··target="#idm5351 | 000503b0:·7461·7267·6574·3d22·2369·646d·3533·3531··target="#idm5351 | ||
| 000503c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000503c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000503d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000503d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000503e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000503e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000503f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000503f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00050400:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00050400:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00050410:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00050410:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00050420:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00050430:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00050440:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00050450:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00050460:·7365·2220·6964·3d22·6964·6d35·3335·3122··se"·id="idm5351" | |||
| 00050470:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00050480:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000504 | 00050420:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 00050430:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00050440:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00050450:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00050460:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00050470:·3d22·6964·6d35·3335·3122·3e3c·7072·653e··="idm5351"><pre> | |||
| 00050480:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00050490:·735d·5d0a·6e61·6d65·203d·2022·7379·736c··s]].name·=·"sysl | |||
| 000504a0:·6f67·2d6e·6722·0a76·6572·7369·6f6e·203d··og-ng".version·= | |||
| 000504b0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 000504c0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 000504d0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 000504e0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 000504f0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00050500:·6172·6765·743d·2223·6964·6d35·3335·3222··arget="#idm5352" | |||
| 00050510:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00050520:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00050530:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00050540:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00050550:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00050560:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00050570:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00050580:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00050590:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000505a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000505b0:·6522·2069·643d·2269·646d·3533·3532·223e··e"·id="idm5352"> | |||
| 000505c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000505d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00050 | 000505e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 000505f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00050600:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00050610:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00050620:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00050630:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00050640:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00050650:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00050660:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00050670:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00050680:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00050690:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 000506a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 000506b0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 000506c0:·456e·7375·7265·2073·7973·6c6f·672d·6e67··Ensure·syslog-ng | |||
| 000506d0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 000506e0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 000506f0:·653a·2073·7973·6c6f·672d·6e67·0a20·2020··e:·syslog-ng.··· | |||
| 00050700:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 00050710:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 00050720:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00050730:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00050740:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00050750:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00050760:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00050770:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00050780:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00050790:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 000507a0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 000507b0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 000507c0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 000507d0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 000507e0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 000507f0:·0a20·202d·2070·6163·6b61·6765·5f73·7973··.··-·package_sys | |||
| 00050800:·6c6f·676e·675f·696e·7374·616c·6c65·640a··logng_installed. | |||
| 000504b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000504c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000504d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000504e0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000504f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00050500:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00050510:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00050520:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00050530:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00050540:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00050550:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00050560:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00050570:·2045·6e73·7572·6520·7379·736c·6f67·2d6e···Ensure·syslog-n | |||
| 00050580:·6720·6973·2069·6e73·7461·6c6c·6564·0a20··g·is·installed.· | |||
| 00050590:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 000505a0:·6d65·3a20·7379·736c·6f67·2d6e·670a·2020··me:·syslog-ng.·· | |||
| 000505b0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 000505c0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000505d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000505e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000505f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00050600:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00050610:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00050620:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | |||
| 00050630:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 00050640:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00050650:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00050660:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00050670:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 00050680:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00050690:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 000506a0:·640a·2020·2d20·7061·636b·6167·655f·7379··d.··-·package_sy | |||
| 000506b0:·736c·6f67·6e67·5f69·6e73·7461·6c6c·6564··slogng_installed | |||
| 000506c0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| Max diff block lines reached; 44816/55218 bytes (81.16%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1715, 14 lines modified | Offset 1715, 19 lines modified | ||
| 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1717 | References:················4.4.2.4 | 1717 | References:················4.4.2.4 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1723 | [[packages]] | ||
| 1724 | name·=·"syslog-ng" | ||
| 1725 | version·=·"*" | ||
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1727 | -·name:·Ensure·syslog-ng·is·installed | 1731 | -·name:·Ensure·syslog-ng·is·installed |
| 1728 | ··package: | 1732 | ··package: |
| Offset 1734, 19 lines modified | Offset 1739, 14 lines modified | ||
| 1734 | ··-·NIST-800-53-CM-6(a) | 1739 | ··-·NIST-800-53-CM-6(a) |
| 1735 | ··-·enable_strategy | 1740 | ··-·enable_strategy |
| 1736 | ··-·low_complexity | 1741 | ··-·low_complexity |
| 1737 | ··-·low_disruption | 1742 | ··-·low_disruption |
| 1738 | ··-·medium_severity | 1743 | ··-·medium_severity |
| 1739 | ··-·no_reboot_needed | 1744 | ··-·no_reboot_needed |
| 1740 | ··-·package_syslogng_installed | 1745 | ··-·package_syslogng_installed |
| 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1742 | [[packages]] | ||
| 1743 | name·=·"syslog-ng" | ||
| 1744 | version·=·"*" | ||
| 1745 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1746 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1746 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1747 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1747 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1748 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1748 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1749 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1749 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1750 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1750 | #·Remediation·is·applicable·only·in·certain·platforms | 1751 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1751 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1752 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1787, 14 lines modified | Offset 1787, 18 lines modified | ||
| 1787 | ···························4.4.2.2,·4.4.2.4 | 1787 | ···························4.4.2.2,·4.4.2.4 |
| 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1795 | [customizations.services] | ||
| 1796 | enabled·=·["syslog-ng"] | ||
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1799 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1802 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1800 | ··block: | 1803 | ··block: |
| Offset 1818, 18 lines modified | Offset 1822, 14 lines modified | ||
| 1818 | ··-·NIST-800-53-CM-6(a) | 1822 | ··-·NIST-800-53-CM-6(a) |
| 1819 | ··-·enable_strategy | 1823 | ··-·enable_strategy |
| 1820 | ··-·low_complexity | 1824 | ··-·low_complexity |
| 1821 | ··-·low_disruption | 1825 | ··-·low_disruption |
| 1822 | ··-·medium_severity | 1826 | ··-·medium_severity |
| 1823 | ··-·no_reboot_needed | 1827 | ··-·no_reboot_needed |
| 1824 | ··-·service_syslogng_enabled | 1828 | ··-·service_syslogng_enabled |
| 1825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1826 | [customizations.services] | ||
| 1827 | enabled·=·["syslog-ng"] | ||
| 1828 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1829 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1830 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1830 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1831 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1831 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1832 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1832 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1833 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1833 | include·enable_syslog-ng | 1834 | include·enable_syslog-ng |
| Offset 1856, 14 lines modified | Offset 1856, 19 lines modified | ||
| 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1862 | ···························SRG-OS-000480-GPOS-00227 | 1862 | ···························SRG-OS-000480-GPOS-00227 |
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1864 | [[packages]] | ||
| 1865 | name·=·"rsyslog" | ||
| 1866 | version·=·"*" | ||
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1868 | -·name:·Ensure·rsyslog·is·installed | 1872 | -·name:·Ensure·rsyslog·is·installed |
| 1869 | ··package: | 1873 | ··package: |
| Offset 1875, 19 lines modified | Offset 1880, 14 lines modified | ||
| 1875 | ··-·NIST-800-53-CM-6(a) | 1880 | ··-·NIST-800-53-CM-6(a) |
| 1876 | ··-·enable_strategy | 1881 | ··-·enable_strategy |
| 1877 | ··-·low_complexity | 1882 | ··-·low_complexity |
| 1878 | ··-·low_disruption | 1883 | ··-·low_disruption |
| 1879 | ··-·medium_severity | 1884 | ··-·medium_severity |
| 1880 | ··-·no_reboot_needed | 1885 | ··-·no_reboot_needed |
| 1881 | ··-·package_rsyslog_installed | 1886 | ··-·package_rsyslog_installed |
| 1882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1883 | [[packages]] | ||
| 1884 | name·=·"rsyslog" | ||
| 1885 | version·=·"*" | ||
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 3540/9447 bytes (37.47%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·313 | 00037d40:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 21115, 78 lines modified | Offset 21115, 78 lines modified | ||
| 000527a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000527a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000527b0:·2369·646d·3533·3531·2220·7461·6269·6e64··#idm5351"·tabind | 000527b0:·2369·646d·3533·3531·2220·7461·6269·6e64··#idm5351"·tabind | ||
| 000527c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 000527c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 000527d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 000527d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 000527e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 000527e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 000527f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 000527f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00052800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00052800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00052810:·5265·6d65·6469·6174·696f·6e20·4 | 00052810:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00052820:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00052830:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00052840:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00052850:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00052860:·6964·6d35·3335·3122·3e3c·7461·626c·6520··idm5351"><table· | |||
| 00052870:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000528 | 00052820:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 00052830:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00052840:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00052850:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00052860:·6170·7365·2220·6964·3d22·6964·6d35·3335··apse"·id="idm535 | |||
| 00052870:·3122·3e3c·7072·653e·3c63·6f64·653e·0a5b··1"><pre><code>.[ | |||
| 00052880:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 00052890:·203d·2022·7379·736c·6f67·2d6e·6722·0a76···=·"syslog-ng".v | |||
| 000528a0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 000528b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 000528c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 000528d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 000528e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 000528f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00052900:·6964·6d35·3335·3222·2074·6162·696e·6465··idm5352"·tabinde | |||
| 00052910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00052920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00052930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00052940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00052950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00052960:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 00052970:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00052980:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00052990:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000529a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000529b0:·646d·3533·3532·223e·3c74·6162·6c65·2063··dm5352"><table·c | |||
| 000529c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00052 | 000529d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 000528a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000528b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 000528c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000528d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00052 | 000529e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 000529f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00052a00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00052a10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00052a20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00052a30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00052a40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00052a50:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00052a60:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00052a70:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00052a80:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00052 | 00052a90:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 00052aa0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00052ab0:·2d20·6e61·6d65·3a20·456e·7375·7265·2073··-·name:·Ensure·s | |||
| 00052ac0:·7973·6c6f·672d·6e67·2069·7320·696e·7374··yslog-ng·is·inst | |||
| 00052ad0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 00052ae0:·0a20·2020·206e·616d·653a·2073·7973·6c6f··.····name:·syslo | |||
| 00052af0:·672d·6e67·0a20·2020·2073·7461·7465·3a20··g-ng.····state:· | |||
| 00052b00:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 00052b10:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00052b20:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00052b30:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00052b40:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00052b50:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00052b60:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00052b70:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00052b80:·2d36·2861·290a·2020·2d20·656e·6162·6c65··-6(a).··-·enable | |||
| 00052b90:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00052ba0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00052bb0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00052bc0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00052bd0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00052be0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00052bf0:·6b61·6765·5f73·7973·6c6f·676e·675f·696e··kage_syslogng_in | |||
| 00052c00:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00052900:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00052910:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00052920:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00052930:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00052940:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00052950:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00052960:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00052970:·7379·736c·6f67·2d6e·6720·6973·2069·6e73··syslog-ng·is·ins | |||
| 00052980:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 00052990:·3a0a·2020·2020·6e61·6d65·3a20·7379·736c··:.····name:·sysl | |||
| 000529a0:·6f67·2d6e·670a·2020·2020·7374·6174·653a··og-ng.····state: | |||
| 000529b0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 000529c0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000529d0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000529e0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000529f0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00052a00:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00052a10:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 00052a20:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00052a30:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 00052a40:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 00052a50:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 00052a60:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 00052a70:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00052a80:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00052a90:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00052aa0:·636b·6167·655f·7379·736c·6f67·6e67·5f69··ckage_syslogng_i | |||
| 00052ab0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00052ac0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| Max diff block lines reached; 100676/111354 bytes (90.41%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1891, 14 lines modified | Offset 1891, 19 lines modified | ||
| 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1893 | References:················4.4.2.4 | 1893 | References:················4.4.2.4 |
| 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1899 | [[packages]] | ||
| 1900 | name·=·"syslog-ng" | ||
| 1901 | version·=·"*" | ||
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1903 | -·name:·Ensure·syslog-ng·is·installed | 1907 | -·name:·Ensure·syslog-ng·is·installed |
| 1904 | ··package: | 1908 | ··package: |
| Offset 1910, 19 lines modified | Offset 1915, 14 lines modified | ||
| 1910 | ··-·NIST-800-53-CM-6(a) | 1915 | ··-·NIST-800-53-CM-6(a) |
| 1911 | ··-·enable_strategy | 1916 | ··-·enable_strategy |
| 1912 | ··-·low_complexity | 1917 | ··-·low_complexity |
| 1913 | ··-·low_disruption | 1918 | ··-·low_disruption |
| 1914 | ··-·medium_severity | 1919 | ··-·medium_severity |
| 1915 | ··-·no_reboot_needed | 1920 | ··-·no_reboot_needed |
| 1916 | ··-·package_syslogng_installed | 1921 | ··-·package_syslogng_installed |
| 1917 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1918 | [[packages]] | ||
| 1919 | name·=·"syslog-ng" | ||
| 1920 | version·=·"*" | ||
| 1921 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1922 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1923 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1924 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1925 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1926 | #·Remediation·is·applicable·only·in·certain·platforms | 1927 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1927 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1928 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1963, 14 lines modified | Offset 1963, 18 lines modified | ||
| 1963 | ···························4.4.2.2,·4.4.2.4 | 1963 | ···························4.4.2.2,·4.4.2.4 |
| 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1971 | [customizations.services] | ||
| 1972 | enabled·=·["syslog-ng"] | ||
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1971 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1974 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1972 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1975 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1973 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1976 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1974 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1977 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1975 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1978 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1976 | ··block: | 1979 | ··block: |
| Offset 1994, 18 lines modified | Offset 1998, 14 lines modified | ||
| 1994 | ··-·NIST-800-53-CM-6(a) | 1998 | ··-·NIST-800-53-CM-6(a) |
| 1995 | ··-·enable_strategy | 1999 | ··-·enable_strategy |
| 1996 | ··-·low_complexity | 2000 | ··-·low_complexity |
| 1997 | ··-·low_disruption | 2001 | ··-·low_disruption |
| 1998 | ··-·medium_severity | 2002 | ··-·medium_severity |
| 1999 | ··-·no_reboot_needed | 2003 | ··-·no_reboot_needed |
| 2000 | ··-·service_syslogng_enabled | 2004 | ··-·service_syslogng_enabled |
| 2001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2002 | [customizations.services] | ||
| 2003 | enabled·=·["syslog-ng"] | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2005 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2006 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2007 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2008 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2009 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2009 | include·enable_syslog-ng | 2010 | include·enable_syslog-ng |
| Offset 2032, 14 lines modified | Offset 2032, 19 lines modified | ||
| 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 2038 | ···························SRG-OS-000480-GPOS-00227 | 2038 | ···························SRG-OS-000480-GPOS-00227 |
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2040 | [[packages]] | ||
| 2041 | name·=·"rsyslog" | ||
| 2042 | version·=·"*" | ||
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2043 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2040 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2044 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2041 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2045 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2042 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2046 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2043 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2047 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2044 | -·name:·Ensure·rsyslog·is·installed | 2048 | -·name:·Ensure·rsyslog·is·installed |
| 2045 | ··package: | 2049 | ··package: |
| Offset 2051, 19 lines modified | Offset 2056, 14 lines modified | ||
| 2051 | ··-·NIST-800-53-CM-6(a) | 2056 | ··-·NIST-800-53-CM-6(a) |
| 2052 | ··-·enable_strategy | 2057 | ··-·enable_strategy |
| 2053 | ··-·low_complexity | 2058 | ··-·low_complexity |
| 2054 | ··-·low_disruption | 2059 | ··-·low_disruption |
| 2055 | ··-·medium_severity | 2060 | ··-·medium_severity |
| 2056 | ··-·no_reboot_needed | 2061 | ··-·no_reboot_needed |
| 2057 | ··-·package_rsyslog_installed | 2062 | ··-·package_rsyslog_installed |
| 2058 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2059 | [[packages]] | ||
| 2060 | name·=·"rsyslog" | ||
| 2061 | version·=·"*" | ||
| 2062 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9893/15805 bytes (62.59%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15651, 78 lines modified | Offset 15651, 78 lines modified | ||
| 0003d220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003d220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003d230:·743d·2223·6964·6d35·3335·3122·2074·6162··t="#idm5351"·tab | 0003d230:·743d·2223·6964·6d35·3335·3122·2074·6162··t="#idm5351"·tab | ||
| 0003d240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003d240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003d250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003d250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003d260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003d260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003d270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003d270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003d280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003d280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003d290:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003d290:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003d2a0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003d2b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003d2c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003d2d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003d2e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003d2f0:·3533·3531·223e·3c70·7265·3e3c·636f·6465··5351"><pre><code | |||
| 0003d300:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003d310:·616d·6520·3d20·2273·7973·6c6f·672d·6e67··ame·=·"syslog-ng | |||
| 0003d320:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003d2a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003d2b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003d2c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003d2d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003d2e0:·643d·2269·646d·3533·3531·223e·3c74·6162··d="idm5351"><tab | |||
| 0003d2f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003d300:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003d310:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003d320:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003d330:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003d340:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003d350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003d360:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d370:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003d380:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003d390:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003d3a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003d3b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003d3c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003d3d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003d3e0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003d3f0:·7265·2073·7973·6c6f·672d·6e67·2069·7320··re·syslog-ng·is· | |||
| 0003d400:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003d410:·6167·653a·0a20·2020·206e·616d·653a·2073··age:.····name:·s | |||
| 0003d420:·7973·6c6f·672d·6e67·0a20·2020·2073·7461··yslog-ng.····sta | |||
| 0003d430:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003d440:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003d450:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003d460:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003d470:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003d480:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003d490:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003d4a0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003d4b0:·332d·434d·2d36·2861·290a·2020·2d20·656e··3-CM-6(a).··-·en | |||
| 0003d4c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003d4d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003d4e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003d4f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003d500:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003d510:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003d520:·2070·6163·6b61·6765·5f73·7973·6c6f·676e···package_syslogn | |||
| 0003d530:·675f·696e·7374·616c·6c65·640a·3c2f·636f··g_installed.</co | |||
| 0003d | 0003d330:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003d | 0003d340:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003d56 | 0003d350:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003d | 0003d360:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003d | 0003d370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003d | 0003d380:·3d22·2369·646d·3533·3532·2220·7461·6269··="#idm5352"·tabi | ||
| 0003d | 0003d390:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003d | 0003d3a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003d | 0003d3b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003d5d | 0003d3c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003d | 0003d3d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003d5f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003d600:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003d610:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003d620:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003d630:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003d640:·7365·2220·6964·3d22·6964·6d35·3335·3222··se"·id="idm5352" | |||
| 0003d650:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003d | 0003d3e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003d3f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003d400:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003d410:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003d420:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003d430:·3d22·6964·6d35·3335·3222·3e3c·7461·626c··="idm5352"><tabl | |||
| 0003d440:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003d450:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003d460:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003d470:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003d480:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003d490:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003d4a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003d4b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003d4c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003d4d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003d4e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003d4f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003d500:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003d510:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003d520:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003d530:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003d | 0003d540:·6520·7379·736c·6f67·2d6e·6720·6973·2069··e·syslog-ng·is·i | ||
| 0003d | 0003d550:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | ||
| 0003d560:·6765·3a0a·2020·2020·6e61·6d65·3a20·7379··ge:.····name:·sy | |||
| 0003d570:·736c·6f67·2d6e·670a·2020·2020·7374·6174··slog-ng.····stat | |||
| 0003d580:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003d590:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003d5a0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003d5b0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003d5c0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003d5d0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003d5e0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003d5f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| Max diff block lines reached; 34854/45394 bytes (76.78%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:11 | 40 | ····*·cpe:/o:debian:debian_linux:11 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 276, 14 lines modified | Offset 276, 19 lines modified | ||
| 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 278 | References:················4.4.2.4 | 278 | References:················4.4.2.4 |
| 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 284 | [[packages]] | ||
| 285 | name·=·"syslog-ng" | ||
| 286 | version·=·"*" | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 288 | -·name:·Ensure·syslog-ng·is·installed | 292 | -·name:·Ensure·syslog-ng·is·installed |
| 289 | ··package: | 293 | ··package: |
| Offset 295, 19 lines modified | Offset 300, 14 lines modified | ||
| 295 | ··-·NIST-800-53-CM-6(a) | 300 | ··-·NIST-800-53-CM-6(a) |
| 296 | ··-·enable_strategy | 301 | ··-·enable_strategy |
| 297 | ··-·low_complexity | 302 | ··-·low_complexity |
| 298 | ··-·low_disruption | 303 | ··-·low_disruption |
| 299 | ··-·medium_severity | 304 | ··-·medium_severity |
| 300 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 301 | ··-·package_syslogng_installed | 306 | ··-·package_syslogng_installed |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | [[packages]] | ||
| 304 | name·=·"syslog-ng" | ||
| 305 | version·=·"*" | ||
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 311 | #·Remediation·is·applicable·only·in·certain·platforms | 312 | #·Remediation·is·applicable·only·in·certain·platforms |
| 312 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 313 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 348, 14 lines modified | Offset 348, 18 lines modified | ||
| 348 | ···························4.4.2.2,·4.4.2.4 | 348 | ···························4.4.2.2,·4.4.2.4 |
| 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 356 | [customizations.services] | ||
| 357 | enabled·=·["syslog-ng"] | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 360 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 363 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 361 | ··block: | 364 | ··block: |
| Offset 379, 18 lines modified | Offset 383, 14 lines modified | ||
| 379 | ··-·NIST-800-53-CM-6(a) | 383 | ··-·NIST-800-53-CM-6(a) |
| 380 | ··-·enable_strategy | 384 | ··-·enable_strategy |
| 381 | ··-·low_complexity | 385 | ··-·low_complexity |
| 382 | ··-·low_disruption | 386 | ··-·low_disruption |
| 383 | ··-·medium_severity | 387 | ··-·medium_severity |
| 384 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 385 | ··-·service_syslogng_enabled | 389 | ··-·service_syslogng_enabled |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 387 | [customizations.services] | ||
| 388 | enabled·=·["syslog-ng"] | ||
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 394 | include·enable_syslog-ng | 395 | include·enable_syslog-ng |
| Offset 417, 14 lines modified | Offset 417, 19 lines modified | ||
| 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 423 | ···························SRG-OS-000480-GPOS-00227 | 423 | ···························SRG-OS-000480-GPOS-00227 |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 425 | [[packages]] | ||
| 426 | name·=·"rsyslog" | ||
| 427 | version·=·"*" | ||
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 425 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 426 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 427 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 428 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 429 | -·name:·Ensure·rsyslog·is·installed | 433 | -·name:·Ensure·rsyslog·is·installed |
| 430 | ··package: | 434 | ··package: |
| Offset 436, 19 lines modified | Offset 441, 14 lines modified | ||
| 436 | ··-·NIST-800-53-CM-6(a) | 441 | ··-·NIST-800-53-CM-6(a) |
| 437 | ··-·enable_strategy | 442 | ··-·enable_strategy |
| 438 | ··-·low_complexity | 443 | ··-·low_complexity |
| 439 | ··-·low_disruption | 444 | ··-·low_disruption |
| 440 | ··-·medium_severity | 445 | ··-·medium_severity |
| 441 | ··-·no_reboot_needed | 446 | ··-·no_reboot_needed |
| 442 | ··-·package_rsyslog_installed | 447 | ··-·package_rsyslog_installed |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | [[packages]] | ||
| 445 | name·=·"rsyslog" | ||
| 446 | version·=·"*" | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1891/7771 bytes (24.33%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 20551, 77 lines modified | Offset 20551, 77 lines modified | ||
| 00050460:·6574·3d22·2369·646d·3533·3531·2220·7461··et="#idm5351"·ta | 00050460:·6574·3d22·2369·646d·3533·3531·2220·7461··et="#idm5351"·ta | ||
| 00050470:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00050470:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00050480:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00050480:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00050490:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00050490:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000504a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000504a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000504b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000504b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 000504c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000504c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000504d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000504e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 000504f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00050500:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00050510:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00050520:·6d35·3335·3122·3e3c·7072·653e·3c63·6f64··m5351"><pre><cod | |||
| 00050530:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 00050540:·6e61·6d65·203d·2022·7379·736c·6f67·2d6e··name·=·"syslog-n | |||
| 00050550:·6722·0a76·6572·7369·6f6e·203d·2022·2a22··g".version·=·"*" | |||
| 000504d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000504e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000504f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00050500:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00050510:·6964·3d22·6964·6d35·3335·3122·3e3c·7461··id="idm5351"><ta | |||
| 00050520:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00050530:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00050540:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00050550:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00050560:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00050570:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00050580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00050590:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000505a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000505b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000505c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000505d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000505e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 000505f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00050600:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00050610:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00050620:·7572·6520·7379·736c·6f67·2d6e·6720·6973··ure·syslog-ng·is | |||
| 00050630:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00050640:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00050650:·7379·736c·6f67·2d6e·670a·2020·2020·7374··syslog-ng.····st | |||
| 00050660:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 00050670:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00050680:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00050690:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000506a0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000506b0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000506c0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 000506d0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 000506e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2065··53-CM-6(a).··-·e | |||
| 000506f0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00050700:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00050710:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00050720:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00050730:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00050740:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00050750:·2d20·7061·636b·6167·655f·7379·736c·6f67··-·package_syslog | |||
| 00050760:·6e67·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ng_installed.</c | |||
| 00050 | 00050560:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 00050 | 00050570:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 00050 | 00050580:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 00050 | 00050590:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 00050 | 000505a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00050 | 000505b0:·743d·2223·6964·6d35·3335·3222·2074·6162··t="#idm5352"·tab | ||
| 00050 | 000505c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00050 | 000505d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00050 | 000505e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00050 | 000505f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00050 | 00050600:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00050820:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 00050830:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 00050840:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00050850:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00050860:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00050870:·7073·6522·2069·643d·2269·646d·3533·3532··pse"·id="idm5352 | |||
| 00050880:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 00050890:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 000508a0:·3d20·2273·7973·6c6f·672d·6e67·220a·7665··=·"syslog-ng".ve | |||
| 00050 | 00050610:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00050620:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00050630:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00050640:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00050650:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00050660:·643d·2269·646d·3533·3532·223e·3c74·6162··d="idm5352"><tab | |||
| 00050670:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00050680:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00050690:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 000506a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 000506b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 000506c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000506d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 000506e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 000506f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00050700:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00050710:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00050720:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00050730:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00050740:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00050750:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00050760:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 00050770:·7265·2073·7973·6c6f·672d·6e67·2069·7320··re·syslog-ng·is· | |||
| 00050780:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 00050790:·6167·653a·0a20·2020·206e·616d·653a·2073··age:.····name:·s | |||
| 000507a0:·7973·6c6f·672d·6e67·0a20·2020·2073·7461··yslog-ng.····sta | |||
| 000507b0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 000507c0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 000507d0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000507e0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000507f0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00050800:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00050810:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| Max diff block lines reached; 100676/111078 bytes (90.64%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1717, 14 lines modified | Offset 1717, 19 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1719 | References:················4.4.2.4 | 1719 | References:················4.4.2.4 |
| 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [[packages]] | ||
| 1726 | name·=·"syslog-ng" | ||
| 1727 | version·=·"*" | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1729 | -·name:·Ensure·syslog-ng·is·installed | 1733 | -·name:·Ensure·syslog-ng·is·installed |
| 1730 | ··package: | 1734 | ··package: |
| Offset 1736, 19 lines modified | Offset 1741, 14 lines modified | ||
| 1736 | ··-·NIST-800-53-CM-6(a) | 1741 | ··-·NIST-800-53-CM-6(a) |
| 1737 | ··-·enable_strategy | 1742 | ··-·enable_strategy |
| 1738 | ··-·low_complexity | 1743 | ··-·low_complexity |
| 1739 | ··-·low_disruption | 1744 | ··-·low_disruption |
| 1740 | ··-·medium_severity | 1745 | ··-·medium_severity |
| 1741 | ··-·no_reboot_needed | 1746 | ··-·no_reboot_needed |
| 1742 | ··-·package_syslogng_installed | 1747 | ··-·package_syslogng_installed |
| 1743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1744 | [[packages]] | ||
| 1745 | name·=·"syslog-ng" | ||
| 1746 | version·=·"*" | ||
| 1747 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1748 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1748 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1749 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1749 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1750 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1750 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1751 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1751 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1752 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1752 | #·Remediation·is·applicable·only·in·certain·platforms | 1753 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1753 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1754 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ···························4.4.2.2,·4.4.2.4 | 1789 | ···························4.4.2.2,·4.4.2.4 |
| 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations.services] | ||
| 1798 | enabled·=·["syslog-ng"] | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1801 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1804 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1802 | ··block: | 1805 | ··block: |
| Offset 1820, 18 lines modified | Offset 1824, 14 lines modified | ||
| 1820 | ··-·NIST-800-53-CM-6(a) | 1824 | ··-·NIST-800-53-CM-6(a) |
| 1821 | ··-·enable_strategy | 1825 | ··-·enable_strategy |
| 1822 | ··-·low_complexity | 1826 | ··-·low_complexity |
| 1823 | ··-·low_disruption | 1827 | ··-·low_disruption |
| 1824 | ··-·medium_severity | 1828 | ··-·medium_severity |
| 1825 | ··-·no_reboot_needed | 1829 | ··-·no_reboot_needed |
| 1826 | ··-·service_syslogng_enabled | 1830 | ··-·service_syslogng_enabled |
| 1827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1828 | [customizations.services] | ||
| 1829 | enabled·=·["syslog-ng"] | ||
| 1830 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1831 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1832 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1833 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1834 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1835 | include·enable_syslog-ng | 1836 | include·enable_syslog-ng |
| Offset 1858, 14 lines modified | Offset 1858, 19 lines modified | ||
| 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1864 | ···························SRG-OS-000480-GPOS-00227 | 1864 | ···························SRG-OS-000480-GPOS-00227 |
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1866 | [[packages]] | ||
| 1867 | name·=·"rsyslog" | ||
| 1868 | version·=·"*" | ||
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1871 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1872 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1873 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1870 | -·name:·Ensure·rsyslog·is·installed | 1874 | -·name:·Ensure·rsyslog·is·installed |
| 1871 | ··package: | 1875 | ··package: |
| Offset 1877, 19 lines modified | Offset 1882, 14 lines modified | ||
| 1877 | ··-·NIST-800-53-CM-6(a) | 1882 | ··-·NIST-800-53-CM-6(a) |
| 1878 | ··-·enable_strategy | 1883 | ··-·enable_strategy |
| 1879 | ··-·low_complexity | 1884 | ··-·low_complexity |
| 1880 | ··-·low_disruption | 1885 | ··-·low_disruption |
| 1881 | ··-·medium_severity | 1886 | ··-·medium_severity |
| 1882 | ··-·no_reboot_needed | 1887 | ··-·no_reboot_needed |
| 1883 | ··-·package_rsyslog_installed | 1888 | ··-·package_rsyslog_installed |
| 1884 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1885 | [[packages]] | ||
| 1886 | name·=·"rsyslog" | ||
| 1887 | version·=·"*" | ||
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9893/15793 bytes (62.64%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 19680, 78 lines modified | Offset 19680, 78 lines modified | ||
| 0004cdf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0004cdf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0004ce00:·743d·2223·6964·6d34·3831·3222·2074·6162··t="#idm4812"·tab | 0004ce00:·743d·2223·6964·6d34·3831·3222·2074·6162··t="#idm4812"·tab | ||
| 0004ce10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0004ce10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0004ce20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0004ce20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0004ce30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0004ce30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0004ce40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0004ce40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0004ce50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0004ce50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0004ce60:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0004ce60:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0004ce70:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0004ce80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004ce90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004cea0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004ceb0:·643d·2269·646d·3438·3132·223e·3c74·6162··d="idm4812"><tab | |||
| 0004cec0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004ced0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004cee0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004cef0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004cf00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004cf10:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004cf20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004cf30:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004cf40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004cf50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004cf60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004cf70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004cf80:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004cf90:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0004cfa0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004cfb0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0004cfc0:·7265·2072·7379·736c·6f67·2069·7320·696e··re·rsyslog·is·in | |||
| 0004cfd0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0004cfe0:·653a·0a20·2020·206e·616d·653a·2072·7379··e:.····name:·rsy | |||
| 0004cff0:·736c·6f67·0a20·2020·2073·7461·7465·3a20··slog.····state:· | |||
| 0004d000:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0004d010:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004d020:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004d030:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0004d040:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0004d050:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0004d060:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0004d070:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0004d080:·2d36·2861·290a·2020·2d20·656e·6162·6c65··-6(a).··-·enable | |||
| 0004d090:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0004d0a0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0004d0b0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0004d0c0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0004d0d0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0004d0e0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0004d0f0:·6b61·6765·5f72·7379·736c·6f67·5f69·6e73··kage_rsyslog_ins | |||
| 0004d100:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0004d110:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0004d120:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0004d130:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0004d140:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0004d150:·2d74·6172·6765·743d·2223·6964·6d34·3831··-target="#idm481 | |||
| 0004d160:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0004d170:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0004d180:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0004d190:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0004d1a0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0004d1b0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0004d1c0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0004d1d0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0004d1e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004d1f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004d200:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004d210:·643d·2269·646d·3438·3133·223e·3c70·7265··d="idm4813"><pre | |||
| 0004d220:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0004d230:·6573·5d5d·0a6e·616d·6520·3d20·2272·7379··es]].name·=·"rsy | |||
| 0004 | 0004ce70:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0004ce80:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004ce90:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004cea0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004ceb0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004cec0:·3438·3132·223e·3c70·7265·3e3c·636f·6465··4812"><pre><code | |||
| 0004ced0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0004cee0:·616d·6520·3d20·2272·7379·736c·6f67·220a··ame·=·"rsyslog". | |||
| 0004cef0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0004cf00:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0004cf10:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0004cf20:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0004cf30:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0004cf40:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0004cf50:·2369·646d·3438·3133·2220·7461·6269·6e64··#idm4813"·tabind | |||
| 0004cf60:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0004cf70:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0004cf80:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0004cf90:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0004cfa0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0004cfb0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0004cfc0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0004cfd0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004cfe0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004cff0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004d000:·6964·6d34·3831·3322·3e3c·7461·626c·6520··idm4813"><table· | |||
| 0004d010:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004d020:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0004d030:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0004d040:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004d050:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004d060:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004d070:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004d080:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0004d090:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004d0a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004d0b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004d0c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004d0d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004d0e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004d0f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0004d100:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| Max diff block lines reached; 90438/100978 bytes (89.56%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1531, 14 lines modified | Offset 1531, 19 lines modified | ||
| 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1537 | ···························SRG-OS-000480-GPOS-00227 | 1537 | ···························SRG-OS-000480-GPOS-00227 |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"rsyslog" | ||
| 1541 | version·=·"*" | ||
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1543 | -·name:·Ensure·rsyslog·is·installed | 1547 | -·name:·Ensure·rsyslog·is·installed |
| 1544 | ··package: | 1548 | ··package: |
| Offset 1550, 19 lines modified | Offset 1555, 14 lines modified | ||
| 1550 | ··-·NIST-800-53-CM-6(a) | 1555 | ··-·NIST-800-53-CM-6(a) |
| 1551 | ··-·enable_strategy | 1556 | ··-·enable_strategy |
| 1552 | ··-·low_complexity | 1557 | ··-·low_complexity |
| 1553 | ··-·low_disruption | 1558 | ··-·low_disruption |
| 1554 | ··-·medium_severity | 1559 | ··-·medium_severity |
| 1555 | ··-·no_reboot_needed | 1560 | ··-·no_reboot_needed |
| 1556 | ··-·package_rsyslog_installed | 1561 | ··-·package_rsyslog_installed |
| 1557 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1558 | [[packages]] | ||
| 1559 | name·=·"rsyslog" | ||
| 1560 | version·=·"*" | ||
| 1561 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1562 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1563 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1564 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1565 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1566 | #·Remediation·is·applicable·only·in·certain·platforms | 1567 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1567 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1568 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1605, 14 lines modified | Offset 1605, 18 lines modified | ||
| 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | [customizations.services] | ||
| 1614 | enabled·=·["rsyslog"] | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1620 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1618 | ··block: | 1621 | ··block: |
| Offset 1636, 18 lines modified | Offset 1640, 14 lines modified | ||
| 1636 | ··-·NIST-800-53-CM-6(a) | 1640 | ··-·NIST-800-53-CM-6(a) |
| 1637 | ··-·enable_strategy | 1641 | ··-·enable_strategy |
| 1638 | ··-·low_complexity | 1642 | ··-·low_complexity |
| 1639 | ··-·low_disruption | 1643 | ··-·low_disruption |
| 1640 | ··-·medium_severity | 1644 | ··-·medium_severity |
| 1641 | ··-·no_reboot_needed | 1645 | ··-·no_reboot_needed |
| 1642 | ··-·service_rsyslog_enabled | 1646 | ··-·service_rsyslog_enabled |
| 1643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1644 | [customizations.services] | ||
| 1645 | enabled·=·["rsyslog"] | ||
| 1646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1651 | include·enable_rsyslog | 1652 | include·enable_rsyslog |
| Offset 3345, 14 lines modified | Offset 3345, 19 lines modified | ||
| 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3347 | ···························SR·2.7,·SR·7.6 | 3347 | ···························SR·2.7,·SR·7.6 |
| 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3349 | ···························A.14.2.4,·A.9.1.2 | 3349 | ···························A.14.2.4,·A.9.1.2 |
| 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3353 | [[packages]] | ||
| 3354 | name·=·"cron" | ||
| 3355 | version·=·"*" | ||
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3357 | -·name:·Ensure·cron·is·installed | 3361 | -·name:·Ensure·cron·is·installed |
| 3358 | ··package: | 3362 | ··package: |
| Offset 3364, 19 lines modified | Offset 3369, 14 lines modified | ||
| 3364 | ··-·NIST-800-53-CM-6(a) | 3369 | ··-·NIST-800-53-CM-6(a) |
| 3365 | ··-·enable_strategy | 3370 | ··-·enable_strategy |
| 3366 | ··-·low_complexity | 3371 | ··-·low_complexity |
| 3367 | ··-·low_disruption | 3372 | ··-·low_disruption |
| 3368 | ··-·medium_severity | 3373 | ··-·medium_severity |
| 3369 | ··-·no_reboot_needed | 3374 | ··-·no_reboot_needed |
| 3370 | ··-·package_cron_installed | 3375 | ··-·package_cron_installed |
| 3371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3372 | [[packages]] | ||
| 3373 | name·=·"cron" | ||
| 3374 | version·=·"*" | ||
| 3375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 8156/14000 bytes (58.26%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e50:·3032·3 | 00037e50:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15038, 80 lines modified | Offset 15038, 80 lines modified | ||
| 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | ||
| 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac40:·6d65·6469·6174·696f·6e20·4 | 0003ac40:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003ac50:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003ac60:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ac70:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ac80:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ac90:·6d32·3636·3222·3e3c·7461·626c·6520·636c··m2662"><table·cl | |||
| 0003aca0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003acb0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003acc0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003acd0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ace0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003acf0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ad00:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ad10:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ad20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ad30:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ad40:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ad50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a | 0003ac50:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003ac60:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ac70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ac80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac90:·7365·2220·6964·3d22·6964·6d32·3636·3222··se"·id="idm2662" | |||
| 0003aca0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003acb0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003acc0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003acd0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ace0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003acf0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ad00:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ad10:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ad20:·7461·7267·6574·3d22·2369·646d·3236·3633··target="#idm2663 | |||
| 0003ad30:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad40:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ad50:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ad60:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ad70:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ad80:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ad90:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ada0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003adb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003adc0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003add0:·7365·2220·6964·3d22·6964·6d32·3636·3322··se"·id="idm2663" | |||
| 0003ade0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003adf0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ae00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ae10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ae20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ae30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ae40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ae50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ae60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ae70:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ae80:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003a | 0003ae90:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003aea0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003aeb0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003aec0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003aed0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003aee0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003aef0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003af00:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003af10:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003af20:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003af30:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003af40:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003af50:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003af60:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003af70:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003af80:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003af90:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003afa0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003afb0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003afc0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003afd0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003afe0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003aff0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b000:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b010:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b020:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b030:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b040:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b050:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003ad80:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ad90:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003ada0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003adb0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003adc0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003add0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003ade0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003adf0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003ae00:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003ae10:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003ae20:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003ae30:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003ae40:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003ae50:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003ae60:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003ae70:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003ae80:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003ae90:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003aea0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003aeb0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003aec0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| Max diff block lines reached; 133766/144582 bytes (92.52%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 130 | ··package: |
| Offset 134, 19 lines modified | Offset 139, 14 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 139 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 140 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 141 | ··-·low_complexity |
| 137 | ··-·low_disruption | 142 | ··-·low_disruption |
| 138 | ··-·medium_severity | 143 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 144 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 145 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 151 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 596, 14 lines modified | Offset 596, 19 lines modified | ||
| 596 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 596 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 597 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 597 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 598 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 598 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 599 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 599 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 600 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 600 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 601 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 601 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 602 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 602 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 604 | [[packages]] | ||
| 605 | name·=·"sudo" | ||
| 606 | version·=·"*" | ||
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 604 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 605 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 606 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 607 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 608 | -·name:·Ensure·sudo·is·installed | 612 | -·name:·Ensure·sudo·is·installed |
| 609 | ··package: | 613 | ··package: |
| Offset 615, 19 lines modified | Offset 620, 14 lines modified | ||
| 615 | ··-·PCI-DSSv4-2.2.6 | 620 | ··-·PCI-DSSv4-2.2.6 |
| 616 | ··-·enable_strategy | 621 | ··-·enable_strategy |
| 617 | ··-·low_complexity | 622 | ··-·low_complexity |
| 618 | ··-·low_disruption | 623 | ··-·low_disruption |
| 619 | ··-·medium_severity | 624 | ··-·medium_severity |
| 620 | ··-·no_reboot_needed | 625 | ··-·no_reboot_needed |
| 621 | ··-·package_sudo_installed | 626 | ··-·package_sudo_installed |
| 622 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 623 | [[packages]] | ||
| 624 | name·=·"sudo" | ||
| 625 | version·=·"*" | ||
| 626 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 627 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 627 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 628 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 628 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 629 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 629 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 630 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 630 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 631 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 631 | #·Remediation·is·applicable·only·in·certain·platforms | 632 | #·Remediation·is·applicable·only·in·certain·platforms |
| 632 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 633 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 5198, 14 lines modified | Offset 5198, 19 lines modified | ||
| 5198 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces | 5198 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces |
| 5199 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force | 5199 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force |
| 5200 | ············attacks·on·the·system. | 5200 | ············attacks·on·the·system. |
| 5201 | Severity: ··medium | 5201 | Severity: ··medium |
| 5202 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 5202 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 5203 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5203 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5204 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 5204 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 5205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5206 | [[packages]] | ||
| 5207 | name·=·"libpam-pwquality" | ||
| 5208 | version·=·"*" | ||
| 5205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5210 | -·name:·Gather·the·package·facts | 5214 | -·name:·Gather·the·package·facts |
| 5211 | ··package_facts: | 5215 | ··package_facts: |
| Offset 5226, 19 lines modified | Offset 5231, 14 lines modified | ||
| 5226 | ··tags: | 5231 | ··tags: |
| 5227 | ··-·enable_strategy | 5232 | ··-·enable_strategy |
| 5228 | ··-·low_complexity | 5233 | ··-·low_complexity |
| 5229 | ··-·low_disruption | 5234 | ··-·low_disruption |
| 5230 | ··-·medium_severity | 5235 | ··-·medium_severity |
| 5231 | ··-·no_reboot_needed | 5236 | ··-·no_reboot_needed |
| 5232 | ··-·package_pam_pwquality_installed | 5237 | ··-·package_pam_pwquality_installed |
| 5233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5234 | [[packages]] | ||
| 5235 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 16951/22511 bytes (75.30%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e40:·3 | 00037e40:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15043, 80 lines modified | Offset 15043, 80 lines modified | ||
| 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | ||
| 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ac90:·656d·6564·6961·7469·6f6e·204 | 0003ac90:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003aca0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003acb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003acc0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003acd0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ace0:·646d·3236·3632·223e·3c74·6162·6c65·2063··dm2662"><table·c | |||
| 0003acf0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ad50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003ad70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ad80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ad90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a | 0003aca0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003acb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003acc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003acd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ace0:·7073·6522·2069·643d·2269·646d·3236·3632··pse"·id="idm2662 | |||
| 0003acf0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad00:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad10:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ad20:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ad30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ad50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ad60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ad70:·2d74·6172·6765·743d·2223·6964·6d32·3636··-target="#idm266 | |||
| 0003ad80:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003ad90:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ada0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003adb0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003adc0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003add0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ade0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003adf0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae00:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae10:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae20:·7073·6522·2069·643d·2269·646d·3236·3633··pse"·id="idm2663 | |||
| 0003ae30:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae40:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ae50:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ae60:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ae70:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae80:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae90:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aea0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003aeb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aec0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003aed0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a | 0003aee0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003aef0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003af00:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003af10:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003af20:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af30:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af40:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003af50:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003af60:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003af70:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003af80:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003af90:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003afa0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003afb0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003afc0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003afd0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003afe0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003aff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003add0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ade0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003adf0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003ae00:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003ae10:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003ae20:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003ae30:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003ae40:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003ae50:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003ae60:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003ae70:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003ae80:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003ae90:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003aea0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003aeb0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003aec0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003aed0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003aee0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003aef0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003af00:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003af10:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 133766/144582 bytes (92.52%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 135, 19 lines modified | Offset 140, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 152 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1287, 14 lines modified | Offset 1287, 19 lines modified | ||
| 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 1288 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1288 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1289 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1289 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1290 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1290 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1291 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1291 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1292 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1292 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1295 | [[packages]] | ||
| 1296 | name·=·"sudo" | ||
| 1297 | version·=·"*" | ||
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1299 | -·name:·Ensure·sudo·is·installed | 1303 | -·name:·Ensure·sudo·is·installed |
| 1300 | ··package: | 1304 | ··package: |
| Offset 1306, 19 lines modified | Offset 1311, 14 lines modified | ||
| 1306 | ··-·PCI-DSSv4-2.2.6 | 1311 | ··-·PCI-DSSv4-2.2.6 |
| 1307 | ··-·enable_strategy | 1312 | ··-·enable_strategy |
| 1308 | ··-·low_complexity | 1313 | ··-·low_complexity |
| 1309 | ··-·low_disruption | 1314 | ··-·low_disruption |
| 1310 | ··-·medium_severity | 1315 | ··-·medium_severity |
| 1311 | ··-·no_reboot_needed | 1316 | ··-·no_reboot_needed |
| 1312 | ··-·package_sudo_installed | 1317 | ··-·package_sudo_installed |
| 1313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1314 | [[packages]] | ||
| 1315 | name·=·"sudo" | ||
| 1316 | version·=·"*" | ||
| 1317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1322 | #·Remediation·is·applicable·only·in·certain·platforms | 1323 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1323 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1324 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 5889, 14 lines modified | Offset 5889, 19 lines modified | ||
| 5889 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces | 5889 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces |
| 5890 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force | 5890 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force |
| 5891 | ············attacks·on·the·system. | 5891 | ············attacks·on·the·system. |
| 5892 | Severity: ··medium | 5892 | Severity: ··medium |
| 5893 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 5893 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 5894 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5894 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5895 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 5895 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 5896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5897 | [[packages]] | ||
| 5898 | name·=·"libpam-pwquality" | ||
| 5899 | version·=·"*" | ||
| 5896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5900 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5901 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5902 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5903 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5904 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5901 | -·name:·Gather·the·package·facts | 5905 | -·name:·Gather·the·package·facts |
| 5902 | ··package_facts: | 5906 | ··package_facts: |
| Offset 5917, 19 lines modified | Offset 5922, 14 lines modified | ||
| 5917 | ··tags: | 5922 | ··tags: |
| 5918 | ··-·enable_strategy | 5923 | ··-·enable_strategy |
| 5919 | ··-·low_complexity | 5924 | ··-·low_complexity |
| 5920 | ··-·low_disruption | 5925 | ··-·low_disruption |
| 5921 | ··-·medium_severity | 5926 | ··-·medium_severity |
| 5922 | ··-·no_reboot_needed | 5927 | ··-·no_reboot_needed |
| 5923 | ··-·package_pam_pwquality_installed | 5928 | ··-·package_pam_pwquality_installed |
| 5924 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5925 | [[packages]] | ||
| 5926 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 16951/22519 bytes (75.27%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e60:·3 | 00037e60:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15029, 80 lines modified | Offset 15029, 80 lines modified | ||
| 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | ||
| 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003abb0:·6564·6961·7469·6f6e·204 | 0003abb0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003abc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003abd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003abe0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003abf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ac00:·3236·3632·223e·3c74·6162·6c65·2063·6c61··2662"><table·cla | |||
| 0003ac10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ac20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ac30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003ac40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ac50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003ac60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ac70:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ac80:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ac90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003aca0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003acb0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003acc0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a | 0003abc0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003abd0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003abe0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003abf0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ac00:·6522·2069·643d·2269·646d·3236·3632·223e··e"·id="idm2662"> | |||
| 0003ac10:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003ac20:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ac30:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003ac40:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003ac50:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ac60:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ac70:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ac80:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ac90:·6172·6765·743d·2223·6964·6d32·3636·3322··arget="#idm2663" | |||
| 0003aca0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003acb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003acc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003acd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ace0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003acf0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003ad00:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ad10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ad20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ad30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ad40:·6522·2069·643d·2269·646d·3236·3633·223e··e"·id="idm2663"> | |||
| 0003ad50:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ad60:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ad70:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ad80:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ad90:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ada0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003adb0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003adc0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003add0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ade0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003adf0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003a | 0003ae00:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003ae10:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ae20:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ae30:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ae40:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ae50:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003ae60:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003ae70:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003ae80:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003ae90:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003aea0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003aeb0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003aec0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003aed0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003aee0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003aef0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003af00:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003af10:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003af20:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003af30:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003af40:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003af50:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003af60:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003af70:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003af80:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003af90:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003afa0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003afb0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003afc0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003acf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003ad00:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003ad10:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003ad20:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003ad30:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003ad40:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ad50:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003ad60:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003ad70:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003ad80:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003ad90:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003ada0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003adb0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003adc0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003add0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003ade0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003adf0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ae00:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ae10:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003ae20:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ae30:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| Max diff block lines reached; 52688/63504 bytes (82.97%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 19 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·aide·is·installed | 127 | -·name:·Ensure·aide·is·installed |
| 124 | ··package: | 128 | ··package: |
| Offset 132, 19 lines modified | Offset 137, 14 lines modified | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | 137 | ··-·PCI-DSSv4-11.5.2 |
| 133 | ··-·enable_strategy | 138 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 139 | ··-·low_complexity |
| 135 | ··-·low_disruption | 140 | ··-·low_disruption |
| 136 | ··-·medium_severity | 141 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 142 | ··-·no_reboot_needed |
| 138 | ··-·package_aide_installed | 143 | ··-·package_aide_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 149 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 568, 14 lines modified | Offset 568, 19 lines modified | ||
| 568 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 568 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 569 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 569 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 570 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 571 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 571 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 573 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 573 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 574 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 574 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 576 | [[packages]] | ||
| 577 | name·=·"sudo" | ||
| 578 | version·=·"*" | ||
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 580 | -·name:·Ensure·sudo·is·installed | 584 | -·name:·Ensure·sudo·is·installed |
| 581 | ··package: | 585 | ··package: |
| Offset 587, 19 lines modified | Offset 592, 14 lines modified | ||
| 587 | ··-·PCI-DSSv4-2.2.6 | 592 | ··-·PCI-DSSv4-2.2.6 |
| 588 | ··-·enable_strategy | 593 | ··-·enable_strategy |
| 589 | ··-·low_complexity | 594 | ··-·low_complexity |
| 590 | ··-·low_disruption | 595 | ··-·low_disruption |
| 591 | ··-·medium_severity | 596 | ··-·medium_severity |
| 592 | ··-·no_reboot_needed | 597 | ··-·no_reboot_needed |
| 593 | ··-·package_sudo_installed | 598 | ··-·package_sudo_installed |
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 595 | [[packages]] | ||
| 596 | name·=·"sudo" | ||
| 597 | version·=·"*" | ||
| 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 600 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 601 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 602 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 603 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 603 | #·Remediation·is·applicable·only·in·certain·platforms | 604 | #·Remediation·is·applicable·only·in·certain·platforms |
| 604 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 605 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 5084, 14 lines modified | Offset 5084, 19 lines modified | ||
| 5084 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces | 5084 | Rationale:··password·in·resisting·attempts·at·guessing·and·brute-force·attacks.·"pwquality"·enforces |
| 5085 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force | 5085 | ············complex·password·construction·configuration·and·has·the·ability·to·limit·brute-force |
| 5086 | ············attacks·on·the·system. | 5086 | ············attacks·on·the·system. |
| 5087 | Severity: ··medium | 5087 | Severity: ··medium |
| 5088 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 5088 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 5089 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5089 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5090 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 5090 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 5091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5092 | [[packages]] | ||
| 5093 | name·=·"libpam-pwquality" | ||
| 5094 | version·=·"*" | ||
| 5091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5095 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5092 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5096 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5093 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5097 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5094 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5098 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5095 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5099 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5096 | -·name:·Gather·the·package·facts | 5100 | -·name:·Gather·the·package·facts |
| 5097 | ··package_facts: | 5101 | ··package_facts: |
| Offset 5112, 19 lines modified | Offset 5117, 14 lines modified | ||
| 5112 | ··tags: | 5117 | ··tags: |
| 5113 | ··-·enable_strategy | 5118 | ··-·enable_strategy |
| 5114 | ··-·low_complexity | 5119 | ··-·low_complexity |
| 5115 | ··-·low_disruption | 5120 | ··-·low_disruption |
| 5116 | ··-·medium_severity | 5121 | ··-·medium_severity |
| 5117 | ··-·no_reboot_needed | 5122 | ··-·no_reboot_needed |
| 5118 | ··-·package_pam_pwquality_installed | 5123 | ··-·package_pam_pwquality_installed |
| 5119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5120 | [[packages]] | ||
| 5121 | name·=·"libpam-pwquality" | ||
| Max diff block lines reached; 3725/9404 bytes (39.61%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e50:·2d3 | 00037e50:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 27681, 89 lines modified | Offset 27681, 89 lines modified | ||
| 0006c200:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0006c200:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0006c210:·2223·6964·6d34·3336·3722·2074·6162·696e··"#idm4367"·tabin | 0006c210:·2223·6964·6d34·3336·3722·2074·6162·696e··"#idm4367"·tabin | ||
| 0006c220:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0006c220:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0006c230:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0006c230:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0006c240:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0006c240:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0006c250:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0006c250:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0006c260:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0006c260:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0006c270:·3e52·656d·6564·6961·7469·6f6e·204 | 0006c270:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0006c280:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0006c280:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0006c290:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006c2a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006c2b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006c2c0:·2269·646d·3433·3637·223e·3c74·6162·6c65··"idm4367"><table | |||
| 0006c2d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006c2e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006c2f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006c300:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006c310:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006c320:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0006c330:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006c340:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006c350:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006c360:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0006c370:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0006c380:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0006c390:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0006c3a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0006c3b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0006c3c0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0006c3d0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0006c3e0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0006c3f0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0006c400:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0006c410:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0006c420:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0006c430:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0006c440:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0006c450:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0006c460:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0006c470:·0a20·202d·2070·6163·6b61·6765·5f70·616d··.··-·package_pam | |||
| 0006c480:·5f70·7771·7561·6c69·7479·5f69·6e73·7461··_pwquality_insta | |||
| 0006c490:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0006c4a0:·7375·7265·206c·6962·7061·6d2d·7077·7175··sure·libpam-pwqu | |||
| 0006c4b0:·616c·6974·7920·6973·2069·6e73·7461·6c6c··ality·is·install | |||
| 0006c4c0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0006c4d0:·2020·6e61·6d65·3a20·6c69·6270·616d·2d70····name:·libpam-p | |||
| 0006c4e0:·7771·7561·6c69·7479·0a20·2020·2073·7461··wquality.····sta | |||
| 0006c4f0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0006c500:·656e·3a20·2722·6c69·6270·616d·2d72·756e··en:·'"libpam-run | |||
| 0006c510:·7469·6d65·2220·696e·2061·6e73·6962·6c65··time"·in·ansible | |||
| 0006c520:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0006c530:·0a20·2074·6167·733a·0a20·202d·2065·6e61··.··tags:.··-·ena | |||
| 0006c540:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0006c550:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0006c560:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0006c570:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0006c580:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0006c590:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0006c5a0:·7061·636b·6167·655f·7061·6d5f·7077·7175··package_pam_pwqu | |||
| 0006c5b0:·616c·6974·795f·696e·7374·616c·6c65·640a··ality_installed. | |||
| 0006c5c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0006c5d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0006c5e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0006c5f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0006c600:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0006c610:·3d22·2369·646d·3433·3638·2220·7461·6269··="#idm4368"·tabi | |||
| 0006c620:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0006c630:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0006c640:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0006c650:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0006c660:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0006c670:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0006c680:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0006c | 0006c290:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0006c6a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0006c6b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0006c6c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | |||
| 0006c6d0:·3336·3822·3e3c·7072·653e·3c63·6f64·653e··368"><pre><code> | |||
| 0006c6e0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0006c6f0:·6d65·203d·2022·6c69·6270·616d·2d70·7771··me·=·"libpam-pwq | |||
| 0006c | 0006c2a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0006c2b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0006c2c0:·6c61·7073·6522·2069·643d·2269·646d·3433··lapse"·id="idm43 | |||
| 0006c2d0:·3637·223e·3c70·7265·3e3c·636f·6465·3e0a··67"><pre><code>. | |||
| 0006c2e0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0006c2f0:·6520·3d20·226c·6962·7061·6d2d·7077·7175··e·=·"libpam-pwqu | |||
| 0006c300:·616c·6974·7922·0a76·6572·7369·6f6e·203d··ality".version·= | |||
| 0006c310:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0006c320:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0006c330:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0006c340:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0006c350:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0006c360:·6172·6765·743d·2223·6964·6d34·3336·3822··arget="#idm4368" | |||
| 0006c370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0006c380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0006c390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0006c3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0006c3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0006c3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0006c3d0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0006c3e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0006c3f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0006c400:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0006c410:·6522·2069·643d·2269·646d·3433·3638·223e··e"·id="idm4368"> | |||
| 0006c420:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0006c430:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0006c440:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0006c450:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0006c460:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 414/12610 bytes (3.28%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 3895, 14 lines modified | Offset 3895, 19 lines modified | ||
| 3895 | Rationale:··effectiveness·of·a·password·in·resisting·attempts·at·guessing·and·brute-force | 3895 | Rationale:··effectiveness·of·a·password·in·resisting·attempts·at·guessing·and·brute-force |
| 3896 | ············attacks.·"pwquality"·enforces·complex·password·construction·configuration·and·has | 3896 | ············attacks.·"pwquality"·enforces·complex·password·construction·configuration·and·has |
| 3897 | ············the·ability·to·limit·brute-force·attacks·on·the·system. | 3897 | ············the·ability·to·limit·brute-force·attacks·on·the·system. |
| 3898 | Severity: ··medium | 3898 | Severity: ··medium |
| 3899 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3899 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3900 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 3900 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 3901 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 3901 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 3902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3903 | [[packages]] | ||
| 3904 | name·=·"libpam-pwquality" | ||
| 3905 | version·=·"*" | ||
| 3902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3907 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3908 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3909 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3910 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3907 | -·name:·Gather·the·package·facts | 3911 | -·name:·Gather·the·package·facts |
| 3908 | ··package_facts: | 3912 | ··package_facts: |
| Offset 3923, 19 lines modified | Offset 3928, 14 lines modified | ||
| 3923 | ··tags: | 3928 | ··tags: |
| 3924 | ··-·enable_strategy | 3929 | ··-·enable_strategy |
| 3925 | ··-·low_complexity | 3930 | ··-·low_complexity |
| 3926 | ··-·low_disruption | 3931 | ··-·low_disruption |
| 3927 | ··-·medium_severity | 3932 | ··-·medium_severity |
| 3928 | ··-·no_reboot_needed | 3933 | ··-·no_reboot_needed |
| 3929 | ··-·package_pam_pwquality_installed | 3934 | ··-·package_pam_pwquality_installed |
| 3930 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3931 | [[packages]] | ||
| 3932 | name·=·"libpam-pwquality" | ||
| 3933 | version·=·"*" | ||
| 3934 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3935 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3935 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3936 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3936 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3937 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3937 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3938 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3938 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3939 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3939 | #·Remediation·is·applicable·only·in·certain·platforms | 3940 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3940 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep | 3941 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 20541, 78 lines modified | Offset 20541, 78 lines modified | ||
| 000503c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000503c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000503d0:·6d31·3037·3034·2220·7461·6269·6e64·6578··m10704"·tabindex | 000503d0:·6d31·3037·3034·2220·7461·6269·6e64·6578··m10704"·tabindex | ||
| 000503e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000503e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000503f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000503f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00050400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00050400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00050410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00050410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00050420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00050420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00050430:·6d65·6469·6174·696f·6e20·4 | 00050430:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00050440:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00050450:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00050460:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00050470:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00050480:·6d31·3037·3034·223e·3c74·6162·6c65·2063··m10704"><table·c | |||
| 00050490:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000504a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000504b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000504c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000504d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000504e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000504f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00050500:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00050510:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00050520:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00050530:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00050540:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00050 | 00050440:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 00050450:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00050460:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00050470:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00050480:·7365·2220·6964·3d22·6964·6d31·3037·3034··se"·id="idm10704 | |||
| 00050490:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 000504a0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 000504b0:·3d20·2273·7973·6c6f·672d·6e67·220a·7665··=·"syslog-ng".ve | |||
| 000504c0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 000504d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000504e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000504f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00050500:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00050510:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00050520:·646d·3130·3730·3522·2074·6162·696e·6465··dm10705"·tabinde | |||
| 00050530:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00050540:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00050550:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00050560:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00050570:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00050580:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 00050590:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 000505a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000505b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000505c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000505d0:·646d·3130·3730·3522·3e3c·7461·626c·6520··dm10705"><table· | |||
| 000505e0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000505f0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00050600:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00050610:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00050620:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00050630:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00050640:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00050650:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00050 | 00050660:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 00050670:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00050680:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00050690:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000506a0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 000506b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 000506c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 000506d0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00050570:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00050580:·2d20·6e61·6d65·3a20·456e·7375·7265·2073··-·name:·Ensure·s | |||
| 00050590:·7973·6c6f·672d·6e67·2069·7320·696e·7374··yslog-ng·is·inst | |||
| 000505a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 000505b0:·0a20·2020·206e·616d·653a·2073·7973·6c6f··.····name:·syslo | |||
| 000505c0:·672d·6e67·0a20·2020·2073·7461·7465·3a20··g-ng.····state:· | |||
| 000505d0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 000505e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000505f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00050600:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00050610:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00050620:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00050630:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00050640:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00050650:·2d36·2861·290a·2020·2d20·656e·6162·6c65··-6(a).··-·enable | |||
| 00050660:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00050670:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00050680:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00050690:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 000506a0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 000506b0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 000506c0:·6b61·6765·5f73·7973·6c6f·676e·675f·696e··kage_syslogng_in | |||
| 000506d0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 000506e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000506f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00050700:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00050710:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00050720:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | |||
| 00050730:·3730·3522·2074·6162·696e·6465·783d·2230··705"·tabindex="0 | |||
| 00050740:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00050750:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00050760:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00050770:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00050780:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00050790:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 000507a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 000507b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 000507c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000507d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000507e0:·2069·643d·2269·646d·3130·3730·3522·3e3c···id="idm10705">< | |||
| 000507f0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00050800:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00050 | 000506e0:·7379·736c·6f67·2d6e·6720·6973·2069·6e73··syslog-ng·is·ins | ||
| 00050 | 000506f0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | ||
| Max diff block lines reached; 44954/55494 bytes (81.01%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1715, 14 lines modified | Offset 1715, 19 lines modified | ||
| 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1717 | References:················4.4.2.4 | 1717 | References:················4.4.2.4 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1723 | [[packages]] | ||
| 1724 | name·=·"syslog-ng" | ||
| 1725 | version·=·"*" | ||
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1727 | -·name:·Ensure·syslog-ng·is·installed | 1731 | -·name:·Ensure·syslog-ng·is·installed |
| 1728 | ··package: | 1732 | ··package: |
| Offset 1734, 19 lines modified | Offset 1739, 14 lines modified | ||
| 1734 | ··-·NIST-800-53-CM-6(a) | 1739 | ··-·NIST-800-53-CM-6(a) |
| 1735 | ··-·enable_strategy | 1740 | ··-·enable_strategy |
| 1736 | ··-·low_complexity | 1741 | ··-·low_complexity |
| 1737 | ··-·low_disruption | 1742 | ··-·low_disruption |
| 1738 | ··-·medium_severity | 1743 | ··-·medium_severity |
| 1739 | ··-·no_reboot_needed | 1744 | ··-·no_reboot_needed |
| 1740 | ··-·package_syslogng_installed | 1745 | ··-·package_syslogng_installed |
| 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1742 | [[packages]] | ||
| 1743 | name·=·"syslog-ng" | ||
| 1744 | version·=·"*" | ||
| 1745 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1746 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1746 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1747 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1747 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1748 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1748 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1749 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1749 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1750 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1750 | #·Remediation·is·applicable·only·in·certain·platforms | 1751 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1751 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1752 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1787, 14 lines modified | Offset 1787, 18 lines modified | ||
| 1787 | ···························4.4.2.2,·4.4.2.4 | 1787 | ···························4.4.2.2,·4.4.2.4 |
| 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1795 | [customizations.services] | ||
| 1796 | enabled·=·["syslog-ng"] | ||
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1799 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1802 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1800 | ··block: | 1803 | ··block: |
| Offset 1818, 18 lines modified | Offset 1822, 14 lines modified | ||
| 1818 | ··-·NIST-800-53-CM-6(a) | 1822 | ··-·NIST-800-53-CM-6(a) |
| 1819 | ··-·enable_strategy | 1823 | ··-·enable_strategy |
| 1820 | ··-·low_complexity | 1824 | ··-·low_complexity |
| 1821 | ··-·low_disruption | 1825 | ··-·low_disruption |
| 1822 | ··-·medium_severity | 1826 | ··-·medium_severity |
| 1823 | ··-·no_reboot_needed | 1827 | ··-·no_reboot_needed |
| 1824 | ··-·service_syslogng_enabled | 1828 | ··-·service_syslogng_enabled |
| 1825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1826 | [customizations.services] | ||
| 1827 | enabled·=·["syslog-ng"] | ||
| 1828 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1829 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1830 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1830 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1831 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1831 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1832 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1832 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1833 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1833 | include·enable_syslog-ng | 1834 | include·enable_syslog-ng |
| Offset 1856, 14 lines modified | Offset 1856, 19 lines modified | ||
| 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1862 | ···························SRG-OS-000480-GPOS-00227 | 1862 | ···························SRG-OS-000480-GPOS-00227 |
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1864 | [[packages]] | ||
| 1865 | name·=·"rsyslog" | ||
| 1866 | version·=·"*" | ||
| 1863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1868 | -·name:·Ensure·rsyslog·is·installed | 1872 | -·name:·Ensure·rsyslog·is·installed |
| 1869 | ··package: | 1873 | ··package: |
| Offset 1875, 19 lines modified | Offset 1880, 14 lines modified | ||
| 1875 | ··-·NIST-800-53-CM-6(a) | 1880 | ··-·NIST-800-53-CM-6(a) |
| 1876 | ··-·enable_strategy | 1881 | ··-·enable_strategy |
| 1877 | ··-·low_complexity | 1882 | ··-·low_complexity |
| 1878 | ··-·low_disruption | 1883 | ··-·low_disruption |
| 1879 | ··-·medium_severity | 1884 | ··-·medium_severity |
| 1880 | ··-·no_reboot_needed | 1885 | ··-·no_reboot_needed |
| 1881 | ··-·package_rsyslog_installed | 1886 | ··-·package_rsyslog_installed |
| 1882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1883 | [[packages]] | ||
| 1884 | name·=·"rsyslog" | ||
| 1885 | version·=·"*" | ||
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 3540/9447 bytes (37.47%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·313 | 00037d40:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 21117, 77 lines modified | Offset 21117, 77 lines modified | ||
| 000527c0:·6765·743d·2223·6964·6d31·3037·3034·2220··get="#idm10704"· | 000527c0:·6765·743d·2223·6964·6d31·3037·3034·2220··get="#idm10704"· | ||
| 000527d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 000527d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 000527e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 000527e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 000527f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 000527f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00052800:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00052800:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00052810:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00052810:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00052820:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00052820:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00052830:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 000528 | 00052830:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 00052840:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00052850:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00052860:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00052870:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00052880:·6964·6d31·3037·3034·223e·3c70·7265·3e3c··idm10704"><pre>< | |||
| 00052890:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 000528a0:·5d5d·0a6e·616d·6520·3d20·2273·7973·6c6f··]].name·=·"syslo | |||
| 000528b0:·672d·6e67·220a·7665·7273·696f·6e20·3d20··g-ng".version·=· | |||
| 000528c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 000528d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 000528e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 000528f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00052900:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00052910:·7267·6574·3d22·2369·646d·3130·3730·3522··rget="#idm10705" | |||
| 00052920:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00052930:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00052940:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00052950:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00052960:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00052970:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00052980:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00052990:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00052 | 000529a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00052860:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00052870:·2220·6964·3d22·6964·6d31·3037·3034·223e··"·id="idm10704"> | |||
| 00052880:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00052 | 000529b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 000529c0:·6522·2069·643d·2269·646d·3130·3730·3522··e"·id="idm10705" | |||
| 000529d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000529e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000529f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00052 | 00052a00:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00052a10:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00052a20:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00052a30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00052a40:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00052a50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00052a60:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00052a70:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00052a80:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00052a90:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00052aa0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00052ab0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00052ac0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00052ad0:·2045·6e73·7572·6520·7379·736c·6f67·2d6e···Ensure·syslog-n | |||
| 00052ae0:·6720·6973·2069·6e73·7461·6c6c·6564·0a20··g·is·installed.· | |||
| 000528b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000528c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000528d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000528e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000528f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00052900:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00052910:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00052920:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00052930:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00052940:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00052950:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00052960:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00052970:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 00052980:·456e·7375·7265·2073·7973·6c6f·672d·6e67··Ensure·syslog-ng | |||
| 00052990:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 00052 | 00052af0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | ||
| 000529b0:·653a·2073·7973·6c6f·672d·6e67·0a20·2020··e:·syslog-ng.··· | |||
| 000529c0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 000529d0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 000529e0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000529f0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00052a00:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00052a10:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00052 | 00052b00:·6d65·3a20·7379·736c·6f67·2d6e·670a·2020··me:·syslog-ng.·· | ||
| 00052b10:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00052b20:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 00052b30:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00052b40:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00052b50:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00052b60:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00052b70:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00052 | 00052b80:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | ||
| 00052a40:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00052a50:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 00052a60:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 00052 | 00052b90:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | ||
| 00052ba0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00052bb0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00052bc0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00052 | 00052bd0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | ||
| 00052be0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00052bf0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 00052c00:·640a·2020·2d20·7061·636b·6167·655f·7379··d.··-·package_sy | |||
| 00052c10:·736c·6f67·6e67·5f69·6e73·7461·6c6c·6564··slogng_installed | |||
| 00052a90:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 00052aa0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 00052ab0:·0a20·202d·2070·6163·6b61·6765·5f73·7973··.··-·package_sys | |||
| 00052ac0:·6c6f·676e·675f·696e·7374·616c·6c65·640a··logng_installed. | |||
| 00052ad0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00052ae0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00052af0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00052b00:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00052b10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00052b20:·3d22·2369·646d·3130·3730·3522·2074·6162··="#idm10705"·tab | |||
| 00052b30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| Max diff block lines reached; 100814/111354 bytes (90.53%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1891, 14 lines modified | Offset 1891, 19 lines modified | ||
| 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1893 | References:················4.4.2.4 | 1893 | References:················4.4.2.4 |
| 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1899 | [[packages]] | ||
| 1900 | name·=·"syslog-ng" | ||
| 1901 | version·=·"*" | ||
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1903 | -·name:·Ensure·syslog-ng·is·installed | 1907 | -·name:·Ensure·syslog-ng·is·installed |
| 1904 | ··package: | 1908 | ··package: |
| Offset 1910, 19 lines modified | Offset 1915, 14 lines modified | ||
| 1910 | ··-·NIST-800-53-CM-6(a) | 1915 | ··-·NIST-800-53-CM-6(a) |
| 1911 | ··-·enable_strategy | 1916 | ··-·enable_strategy |
| 1912 | ··-·low_complexity | 1917 | ··-·low_complexity |
| 1913 | ··-·low_disruption | 1918 | ··-·low_disruption |
| 1914 | ··-·medium_severity | 1919 | ··-·medium_severity |
| 1915 | ··-·no_reboot_needed | 1920 | ··-·no_reboot_needed |
| 1916 | ··-·package_syslogng_installed | 1921 | ··-·package_syslogng_installed |
| 1917 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1918 | [[packages]] | ||
| 1919 | name·=·"syslog-ng" | ||
| 1920 | version·=·"*" | ||
| 1921 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1922 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1923 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1924 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1925 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1926 | #·Remediation·is·applicable·only·in·certain·platforms | 1927 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1927 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1928 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1963, 14 lines modified | Offset 1963, 18 lines modified | ||
| 1963 | ···························4.4.2.2,·4.4.2.4 | 1963 | ···························4.4.2.2,·4.4.2.4 |
| 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1971 | [customizations.services] | ||
| 1972 | enabled·=·["syslog-ng"] | ||
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1971 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1974 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1972 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1975 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1973 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1976 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1974 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1977 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1975 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1978 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1976 | ··block: | 1979 | ··block: |
| Offset 1994, 18 lines modified | Offset 1998, 14 lines modified | ||
| 1994 | ··-·NIST-800-53-CM-6(a) | 1998 | ··-·NIST-800-53-CM-6(a) |
| 1995 | ··-·enable_strategy | 1999 | ··-·enable_strategy |
| 1996 | ··-·low_complexity | 2000 | ··-·low_complexity |
| 1997 | ··-·low_disruption | 2001 | ··-·low_disruption |
| 1998 | ··-·medium_severity | 2002 | ··-·medium_severity |
| 1999 | ··-·no_reboot_needed | 2003 | ··-·no_reboot_needed |
| 2000 | ··-·service_syslogng_enabled | 2004 | ··-·service_syslogng_enabled |
| 2001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2002 | [customizations.services] | ||
| 2003 | enabled·=·["syslog-ng"] | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2005 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2006 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2007 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2008 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2009 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2009 | include·enable_syslog-ng | 2010 | include·enable_syslog-ng |
| Offset 2032, 14 lines modified | Offset 2032, 19 lines modified | ||
| 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 2032 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 2033 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 2034 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 2035 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 2036 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 2037 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 2038 | ···························SRG-OS-000480-GPOS-00227 | 2038 | ···························SRG-OS-000480-GPOS-00227 |
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2040 | [[packages]] | ||
| 2041 | name·=·"rsyslog" | ||
| 2042 | version·=·"*" | ||
| 2039 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2043 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2040 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2044 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2041 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2045 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2042 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2046 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2043 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2047 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2044 | -·name:·Ensure·rsyslog·is·installed | 2048 | -·name:·Ensure·rsyslog·is·installed |
| 2045 | ··package: | 2049 | ··package: |
| Offset 2051, 19 lines modified | Offset 2056, 14 lines modified | ||
| 2051 | ··-·NIST-800-53-CM-6(a) | 2056 | ··-·NIST-800-53-CM-6(a) |
| 2052 | ··-·enable_strategy | 2057 | ··-·enable_strategy |
| 2053 | ··-·low_complexity | 2058 | ··-·low_complexity |
| 2054 | ··-·low_disruption | 2059 | ··-·low_disruption |
| 2055 | ··-·medium_severity | 2060 | ··-·medium_severity |
| 2056 | ··-·no_reboot_needed | 2061 | ··-·no_reboot_needed |
| 2057 | ··-·package_rsyslog_installed | 2062 | ··-·package_rsyslog_installed |
| 2058 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2059 | [[packages]] | ||
| 2060 | name·=·"rsyslog" | ||
| 2061 | version·=·"*" | ||
| 2062 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9893/15805 bytes (62.59%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15652, 77 lines modified | Offset 15652, 77 lines modified | ||
| 0003d230:·6574·3d22·2369·646d·3130·3730·3422·2074··et="#idm10704"·t | 0003d230:·6574·3d22·2369·646d·3130·3730·3422·2074··et="#idm10704"·t | ||
| 0003d240:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003d240:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003d250:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003d250:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003d260:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003d260:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003d270:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003d270:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003d280:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003d280:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003d290:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003d290:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003d2a0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003d2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003d2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003d2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003d2e0:·2069·643d·2269·646d·3130·3730·3422·3e3c···id="idm10704">< | |||
| 0003d2f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003d | 0003d2a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003d2b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003d2c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003d2d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003d2e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003d2f0:·646d·3130·3730·3422·3e3c·7072·653e·3c63··dm10704"><pre><c | |||
| 0003d300:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003d310:·5d0a·6e61·6d65·203d·2022·7379·736c·6f67··].name·=·"syslog | |||
| 0003d320:·2d6e·6722·0a76·6572·7369·6f6e·203d·2022··-ng".version·=·" | |||
| 0003d330:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003d340:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003d350:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003d360:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003d370:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003d380:·6765·743d·2223·6964·6d31·3037·3035·2220··get="#idm10705"· | |||
| 0003d390:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003d3a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003d3b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003d3c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003d3d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003d3e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003d3f0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003d400:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003d410:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003d420:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003d430:·2220·6964·3d22·6964·6d31·3037·3035·223e··"·id="idm10705"> | |||
| 0003d440:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003d450:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003d460:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003d | 0003d470:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003d320:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003d | 0003d480:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003d490:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003d4a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003d4b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003d4c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003d4d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003d4e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003d4f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003d500:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003d510:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003d520:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003d530:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003d540:·456e·7375·7265·2073·7973·6c6f·672d·6e67··Ensure·syslog-ng | |||
| 0003d550:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003d560:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003d570:·653a·2073·7973·6c6f·672d·6e67·0a20·2020··e:·syslog-ng.··· | |||
| 0003d580:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003d590:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003d5a0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003d5b0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003d5c0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003d5d0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003d5e0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003d5f0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003d600:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003d610:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003d620:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003d630:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003d640:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003d650:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003d660:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003d670:·0a20·202d·2070·6163·6b61·6765·5f73·7973··.··-·package_sys | |||
| 0003d680:·6c6f·676e·675f·696e·7374·616c·6c65·640a··logng_installed. | |||
| 0003d340:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003d350:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003d360:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003d370:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003d380:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003d390:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003d3a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003d3b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003d3c0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003d3d0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003d3e0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003d3f0:·6e73·7572·6520·7379·736c·6f67·2d6e·6720··nsure·syslog-ng· | |||
| 0003d400:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003d410:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003d420:·3a20·7379·736c·6f67·2d6e·670a·2020·2020··:·syslog-ng.···· | |||
| 0003d430:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003d440:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003d450:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003d460:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003d470:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003d480:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003d490:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003d4a0:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0003d4b0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003d4c0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003d4d0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003d4e0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003d4f0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003d500:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003d510:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003d520:·2020·2d20·7061·636b·6167·655f·7379·736c····-·package_sysl | |||
| 0003d530:·6f67·6e67·5f69·6e73·7461·6c6c·6564·0a3c··ogng_installed.< | |||
| 0003d540:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003d550:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| Max diff block lines reached; 34992/45394 bytes (77.09%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:12 | 40 | ····*·cpe:/o:debian:debian_linux:12 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 276, 14 lines modified | Offset 276, 19 lines modified | ||
| 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 278 | References:················4.4.2.4 | 278 | References:················4.4.2.4 |
| 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 284 | [[packages]] | ||
| 285 | name·=·"syslog-ng" | ||
| 286 | version·=·"*" | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 288 | -·name:·Ensure·syslog-ng·is·installed | 292 | -·name:·Ensure·syslog-ng·is·installed |
| 289 | ··package: | 293 | ··package: |
| Offset 295, 19 lines modified | Offset 300, 14 lines modified | ||
| 295 | ··-·NIST-800-53-CM-6(a) | 300 | ··-·NIST-800-53-CM-6(a) |
| 296 | ··-·enable_strategy | 301 | ··-·enable_strategy |
| 297 | ··-·low_complexity | 302 | ··-·low_complexity |
| 298 | ··-·low_disruption | 303 | ··-·low_disruption |
| 299 | ··-·medium_severity | 304 | ··-·medium_severity |
| 300 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 301 | ··-·package_syslogng_installed | 306 | ··-·package_syslogng_installed |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | [[packages]] | ||
| 304 | name·=·"syslog-ng" | ||
| 305 | version·=·"*" | ||
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 311 | #·Remediation·is·applicable·only·in·certain·platforms | 312 | #·Remediation·is·applicable·only·in·certain·platforms |
| 312 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 313 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 348, 14 lines modified | Offset 348, 18 lines modified | ||
| 348 | ···························4.4.2.2,·4.4.2.4 | 348 | ···························4.4.2.2,·4.4.2.4 |
| 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 356 | [customizations.services] | ||
| 357 | enabled·=·["syslog-ng"] | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 360 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 363 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 361 | ··block: | 364 | ··block: |
| Offset 379, 18 lines modified | Offset 383, 14 lines modified | ||
| 379 | ··-·NIST-800-53-CM-6(a) | 383 | ··-·NIST-800-53-CM-6(a) |
| 380 | ··-·enable_strategy | 384 | ··-·enable_strategy |
| 381 | ··-·low_complexity | 385 | ··-·low_complexity |
| 382 | ··-·low_disruption | 386 | ··-·low_disruption |
| 383 | ··-·medium_severity | 387 | ··-·medium_severity |
| 384 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 385 | ··-·service_syslogng_enabled | 389 | ··-·service_syslogng_enabled |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 387 | [customizations.services] | ||
| 388 | enabled·=·["syslog-ng"] | ||
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 394 | include·enable_syslog-ng | 395 | include·enable_syslog-ng |
| Offset 417, 14 lines modified | Offset 417, 19 lines modified | ||
| 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 417 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 419 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 420 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 421 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 422 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 423 | ···························SRG-OS-000480-GPOS-00227 | 423 | ···························SRG-OS-000480-GPOS-00227 |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 425 | [[packages]] | ||
| 426 | name·=·"rsyslog" | ||
| 427 | version·=·"*" | ||
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 425 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 426 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 427 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 428 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 429 | -·name:·Ensure·rsyslog·is·installed | 433 | -·name:·Ensure·rsyslog·is·installed |
| 430 | ··package: | 434 | ··package: |
| Offset 436, 19 lines modified | Offset 441, 14 lines modified | ||
| 436 | ··-·NIST-800-53-CM-6(a) | 441 | ··-·NIST-800-53-CM-6(a) |
| 437 | ··-·enable_strategy | 442 | ··-·enable_strategy |
| 438 | ··-·low_complexity | 443 | ··-·low_complexity |
| 439 | ··-·low_disruption | 444 | ··-·low_disruption |
| 440 | ··-·medium_severity | 445 | ··-·medium_severity |
| 441 | ··-·no_reboot_needed | 446 | ··-·no_reboot_needed |
| 442 | ··-·package_rsyslog_installed | 447 | ··-·package_rsyslog_installed |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | [[packages]] | ||
| 445 | name·=·"rsyslog" | ||
| 446 | version·=·"*" | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1891/7771 bytes (24.33%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 20552, 78 lines modified | Offset 20552, 78 lines modified | ||
| 00050470:·2d74·6172·6765·743d·2223·6964·6d31·3037··-target="#idm107 | 00050470:·2d74·6172·6765·743d·2223·6964·6d31·3037··-target="#idm107 | ||
| 00050480:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | 00050480:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | ||
| 00050490:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00050490:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 000504a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 000504a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000504b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000504b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000504c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000504c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000504d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000504d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000504e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 000504f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00050500:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00050510:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00050520:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00050530:·6964·3d22·6964·6d31·3037·3034·223e·3c70··id="idm10704"><p | |||
| 00050540:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00050550:·6167·6573·5d5d·0a6e·616d·6520·3d20·2273··ages]].name·=·"s | |||
| 00050560:·7973·6c6f·672d·6e67·220a·7665·7273·696f··yslog-ng".versio | |||
| 00050570:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 000504e0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000504f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00050500:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00050510:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00050520:·6170·7365·2220·6964·3d22·6964·6d31·3037··apse"·id="idm107 | |||
| 00050530:·3034·223e·3c74·6162·6c65·2063·6c61·7373··04"><table·class | |||
| 00050540:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00050550:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00050560:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00050570:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00050580:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00050590:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000505a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000505b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000505c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000505d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000505e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000505f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00050600:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00050610:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00050620:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00050630:·6d65·3a20·456e·7375·7265·2073·7973·6c6f··me:·Ensure·syslo | |||
| 00050640:·672d·6e67·2069·7320·696e·7374·616c·6c65··g-ng·is·installe | |||
| 00050650:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 00050660:·206e·616d·653a·2073·7973·6c6f·672d·6e67···name:·syslog-ng | |||
| 00050670:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 00050680:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 00050690:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000506a0:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000506b0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000506c0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000506d0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 000506e0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4e49··].··tags:.··-·NI | |||
| 000506f0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 00050700:·290a·2020·2d20·656e·6162·6c65·5f73·7472··).··-·enable_str | |||
| 00050710:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00050720:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00050730:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00050740:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00050750:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00050760:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00050770:·5f73·7973·6c6f·676e·675f·696e·7374·616c··_syslogng_instal | |||
| 00050780:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00050 | 00050580:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 00050 | 00050590:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 00050 | 000505a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 000507c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 000507d0:·7267·6574·3d22·2369·646d·3130·3730·3522··rget="#idm10705" | |||
| 000507e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000507f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00050800:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00050810:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00050820:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00050830:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00050840:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 00050850:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 00050860:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00050870:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00050 | 000505b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 00050890:·2269·646d·3130·3730·3522·3e3c·7072·653e··"idm10705"><pre> | |||
| 000508a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 000508b0:·735d·5d0a·6e61·6d65·203d·2022·7379·736c··s]].name·=·"sysl | |||
| 00050 | 000505c0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 000505d0:·3730·3522·2074·6162·696e·6465·783d·2230··705"·tabindex="0 | |||
| 000505e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 000505f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00050600:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00050610:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00050620:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00050630:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 00050640:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00050650:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00050660:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00050670:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00050680:·3730·3522·3e3c·7461·626c·6520·636c·6173··705"><table·clas | |||
| 00050690:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000506a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000506b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000506c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000506d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000506e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000506f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00050700:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00050710:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00050720:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00050730:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00050740:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00050750:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00050760:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00050770:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00050780:·616d·653a·2045·6e73·7572·6520·7379·736c··ame:·Ensure·sysl | |||
| 00050790:·6f67·2d6e·6720·6973·2069·6e73·7461·6c6c··og-ng·is·install | |||
| 000507a0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 000507b0:·2020·6e61·6d65·3a20·7379·736c·6f67·2d6e····name:·syslog-n | |||
| Max diff block lines reached; 100952/111492 bytes (90.55%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1717, 14 lines modified | Offset 1717, 19 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1719 | References:················4.4.2.4 | 1719 | References:················4.4.2.4 |
| 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [[packages]] | ||
| 1726 | name·=·"syslog-ng" | ||
| 1727 | version·=·"*" | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1729 | -·name:·Ensure·syslog-ng·is·installed | 1733 | -·name:·Ensure·syslog-ng·is·installed |
| 1730 | ··package: | 1734 | ··package: |
| Offset 1736, 19 lines modified | Offset 1741, 14 lines modified | ||
| 1736 | ··-·NIST-800-53-CM-6(a) | 1741 | ··-·NIST-800-53-CM-6(a) |
| 1737 | ··-·enable_strategy | 1742 | ··-·enable_strategy |
| 1738 | ··-·low_complexity | 1743 | ··-·low_complexity |
| 1739 | ··-·low_disruption | 1744 | ··-·low_disruption |
| 1740 | ··-·medium_severity | 1745 | ··-·medium_severity |
| 1741 | ··-·no_reboot_needed | 1746 | ··-·no_reboot_needed |
| 1742 | ··-·package_syslogng_installed | 1747 | ··-·package_syslogng_installed |
| 1743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1744 | [[packages]] | ||
| 1745 | name·=·"syslog-ng" | ||
| 1746 | version·=·"*" | ||
| 1747 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1748 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1748 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1749 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1749 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1750 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1750 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1751 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1751 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1752 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1752 | #·Remediation·is·applicable·only·in·certain·platforms | 1753 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1753 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1754 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ···························4.4.2.2,·4.4.2.4 | 1789 | ···························4.4.2.2,·4.4.2.4 |
| 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations.services] | ||
| 1798 | enabled·=·["syslog-ng"] | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1801 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1804 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1802 | ··block: | 1805 | ··block: |
| Offset 1820, 18 lines modified | Offset 1824, 14 lines modified | ||
| 1820 | ··-·NIST-800-53-CM-6(a) | 1824 | ··-·NIST-800-53-CM-6(a) |
| 1821 | ··-·enable_strategy | 1825 | ··-·enable_strategy |
| 1822 | ··-·low_complexity | 1826 | ··-·low_complexity |
| 1823 | ··-·low_disruption | 1827 | ··-·low_disruption |
| 1824 | ··-·medium_severity | 1828 | ··-·medium_severity |
| 1825 | ··-·no_reboot_needed | 1829 | ··-·no_reboot_needed |
| 1826 | ··-·service_syslogng_enabled | 1830 | ··-·service_syslogng_enabled |
| 1827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1828 | [customizations.services] | ||
| 1829 | enabled·=·["syslog-ng"] | ||
| 1830 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1831 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1832 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1833 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1834 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1835 | include·enable_syslog-ng | 1836 | include·enable_syslog-ng |
| Offset 1858, 14 lines modified | Offset 1858, 19 lines modified | ||
| 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1858 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1859 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1860 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1861 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1862 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1863 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1864 | ···························SRG-OS-000480-GPOS-00227 | 1864 | ···························SRG-OS-000480-GPOS-00227 |
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1866 | [[packages]] | ||
| 1867 | name·=·"rsyslog" | ||
| 1868 | version·=·"*" | ||
| 1865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1871 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1872 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1873 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1870 | -·name:·Ensure·rsyslog·is·installed | 1874 | -·name:·Ensure·rsyslog·is·installed |
| 1871 | ··package: | 1875 | ··package: |
| Offset 1877, 19 lines modified | Offset 1882, 14 lines modified | ||
| 1877 | ··-·NIST-800-53-CM-6(a) | 1882 | ··-·NIST-800-53-CM-6(a) |
| 1878 | ··-·enable_strategy | 1883 | ··-·enable_strategy |
| 1879 | ··-·low_complexity | 1884 | ··-·low_complexity |
| 1880 | ··-·low_disruption | 1885 | ··-·low_disruption |
| 1881 | ··-·medium_severity | 1886 | ··-·medium_severity |
| 1882 | ··-·no_reboot_needed | 1887 | ··-·no_reboot_needed |
| 1883 | ··-·package_rsyslog_installed | 1888 | ··-·package_rsyslog_installed |
| 1884 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1885 | [[packages]] | ||
| 1886 | name·=·"rsyslog" | ||
| 1887 | version·=·"*" | ||
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9893/15793 bytes (62.64%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 19682, 77 lines modified | Offset 19682, 77 lines modified | ||
| 0004ce10:·7461·7267·6574·3d22·2369·646d·3130·3131··target="#idm1011 | 0004ce10:·7461·7267·6574·3d22·2369·646d·3130·3131··target="#idm1011 | ||
| 0004ce20:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0004ce20:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0004ce30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0004ce30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0004ce40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0004ce40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0004ce50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0004ce50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0004ce60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0004ce60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0004ce70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0004ce70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0004ce80:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0004ce90:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004cea0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0004ceb0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0004cec0:·7073·6522·2069·643d·2269·646d·3130·3131··pse"·id="idm1011 | |||
| 0004ced0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0004cee0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0004ce | 0004ce80:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0004ce90:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0004cea0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004ceb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004cec0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004ced0:·643d·2269·646d·3130·3131·3822·3e3c·7072··d="idm10118"><pr | |||
| 0004cee0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0004cef0:·6765·735d·5d0a·6e61·6d65·203d·2022·7273··ges]].name·=·"rs | |||
| 0004cf00:·7973·6c6f·6722·0a76·6572·7369·6f6e·203d··yslog".version·= | |||
| 0004cf10:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0004cf20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0004cf30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0004cf40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0004cf50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0004cf60:·6172·6765·743d·2223·6964·6d31·3031·3139··arget="#idm10119 | |||
| 0004cf70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0004cf80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0004cf90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0004cfa0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0004cfb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0004cfc0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0004cfd0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0004cfe0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004cff0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004d000:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004d010:·7365·2220·6964·3d22·6964·6d31·3031·3139··se"·id="idm10119 | |||
| 0004d020:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0004d030:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0004 | 0004d040:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004d050:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0004d060:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0004d070:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0004d080:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004d090:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004d0a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004d0b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0004d0c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0004d0d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0004d0e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0004d0f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0004d100:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0004d110:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0004d120:·3a20·456e·7375·7265·2072·7379·736c·6f67··:·Ensure·rsyslog | |||
| 0004cf10:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0004cf20:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0004cf30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004cf40:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0004cf50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004cf60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0004cf70:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0004cf80:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0004cf90:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0004cfa0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0004cfb0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0004cfc0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0004cfd0:·653a·2045·6e73·7572·6520·7273·7973·6c6f··e:·Ensure·rsyslo | |||
| 0004cfe0:·6720·6973·2069·6e73·7461·6c6c·6564·0a20··g·is·installed.· | |||
| 0004cff0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0004d000:·6d65·3a20·7273·7973·6c6f·670a·2020·2020··me:·rsyslog.···· | |||
| 0004d010:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0004d020:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0004d030:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0004d040:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0004d050:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0004d060:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0004d070:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0004d080:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0004d090:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0004d0a0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0004d0b0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0004d0c0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0004d0d0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0004d0e0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0004d0f0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0004d100:·2020·2d20·7061·636b·6167·655f·7273·7973····-·package_rsys | |||
| 0004d1 | 0004d130:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | ||
| 0004d140:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0004d150:·653a·2072·7379·736c·6f67·0a20·2020·2073··e:·rsyslog.····s | |||
| 0004d160:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0004d170:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0004d180:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0004d190:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0004d1a0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0004d1b0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0004d1c0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0004d1d0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0004d1e0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0004d1f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0004d200:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0004d210:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0004d220:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0004d230:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0004d240:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0004d250:·202d·2070·6163·6b61·6765·5f72·7379·736c···-·package_rsysl | |||
| 0004d260:·6f67·5f69·6e73·7461·6c6c·6564·0a3c·2f63··og_installed.</c | |||
| 0004d120:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0004d130:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| Max diff block lines reached; 90714/101116 bytes (89.71%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1531, 14 lines modified | Offset 1531, 19 lines modified | ||
| 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1537 | ···························SRG-OS-000480-GPOS-00227 | 1537 | ···························SRG-OS-000480-GPOS-00227 |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"rsyslog" | ||
| 1541 | version·=·"*" | ||
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1543 | -·name:·Ensure·rsyslog·is·installed | 1547 | -·name:·Ensure·rsyslog·is·installed |
| 1544 | ··package: | 1548 | ··package: |
| Offset 1550, 19 lines modified | Offset 1555, 14 lines modified | ||
| 1550 | ··-·NIST-800-53-CM-6(a) | 1555 | ··-·NIST-800-53-CM-6(a) |
| 1551 | ··-·enable_strategy | 1556 | ··-·enable_strategy |
| 1552 | ··-·low_complexity | 1557 | ··-·low_complexity |
| 1553 | ··-·low_disruption | 1558 | ··-·low_disruption |
| 1554 | ··-·medium_severity | 1559 | ··-·medium_severity |
| 1555 | ··-·no_reboot_needed | 1560 | ··-·no_reboot_needed |
| 1556 | ··-·package_rsyslog_installed | 1561 | ··-·package_rsyslog_installed |
| 1557 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1558 | [[packages]] | ||
| 1559 | name·=·"rsyslog" | ||
| 1560 | version·=·"*" | ||
| 1561 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1562 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1563 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1564 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1565 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1566 | #·Remediation·is·applicable·only·in·certain·platforms | 1567 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1567 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1568 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1605, 14 lines modified | Offset 1605, 18 lines modified | ||
| 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | [customizations.services] | ||
| 1614 | enabled·=·["rsyslog"] | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1620 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1618 | ··block: | 1621 | ··block: |
| Offset 1636, 18 lines modified | Offset 1640, 14 lines modified | ||
| 1636 | ··-·NIST-800-53-CM-6(a) | 1640 | ··-·NIST-800-53-CM-6(a) |
| 1637 | ··-·enable_strategy | 1641 | ··-·enable_strategy |
| 1638 | ··-·low_complexity | 1642 | ··-·low_complexity |
| 1639 | ··-·low_disruption | 1643 | ··-·low_disruption |
| 1640 | ··-·medium_severity | 1644 | ··-·medium_severity |
| 1641 | ··-·no_reboot_needed | 1645 | ··-·no_reboot_needed |
| 1642 | ··-·service_rsyslog_enabled | 1646 | ··-·service_rsyslog_enabled |
| 1643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1644 | [customizations.services] | ||
| 1645 | enabled·=·["rsyslog"] | ||
| 1646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1651 | include·enable_rsyslog | 1652 | include·enable_rsyslog |
| Offset 3345, 14 lines modified | Offset 3345, 19 lines modified | ||
| 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3345 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3346 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3347 | ···························SR·2.7,·SR·7.6 | 3347 | ···························SR·2.7,·SR·7.6 |
| 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3348 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3349 | ···························A.14.2.4,·A.9.1.2 | 3349 | ···························A.14.2.4,·A.9.1.2 |
| 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3350 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3351 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3353 | [[packages]] | ||
| 3354 | name·=·"cron" | ||
| 3355 | version·=·"*" | ||
| 3352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3357 | -·name:·Ensure·cron·is·installed | 3361 | -·name:·Ensure·cron·is·installed |
| 3358 | ··package: | 3362 | ··package: |
| Offset 3364, 19 lines modified | Offset 3369, 14 lines modified | ||
| 3364 | ··-·NIST-800-53-CM-6(a) | 3369 | ··-·NIST-800-53-CM-6(a) |
| 3365 | ··-·enable_strategy | 3370 | ··-·enable_strategy |
| 3366 | ··-·low_complexity | 3371 | ··-·low_complexity |
| 3367 | ··-·low_disruption | 3372 | ··-·low_disruption |
| 3368 | ··-·medium_severity | 3373 | ··-·medium_severity |
| 3369 | ··-·no_reboot_needed | 3374 | ··-·no_reboot_needed |
| 3370 | ··-·package_cron_installed | 3375 | ··-·package_cron_installed |
| 3371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3372 | [[packages]] | ||
| 3373 | name·=·"cron" | ||
| 3374 | version·=·"*" | ||
| 3375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 8156/14000 bytes (58.26%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-debian11-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-debian11-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-debian11-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-debian11-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-debian11-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-debian11-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-debian11-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-debian11-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-debian11-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-debian11-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-debian11-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-debian11-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-debian11-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-debian11-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:debian:debian_linux:11"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:debian:debian_linux:11"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Debian·Linux·11</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Debian·Linux·11</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml">oval:ssg-installed_OS_is_debian11:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml">oval:ssg-installed_OS_is_debian11:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-debian11-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-debian11-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Debian·11.·It·is·a·rendering·of | 40 | configuration·settings·for·Debian·11.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 105, 158 lines modified | Offset 105, 158 lines modified | ||
| 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 111 | ······<cpe-lang:platform-specification> | 111 | ······<cpe-lang:platform-specification> |
| 112 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 115 | ··········</cpe-lang:logical-test> | ||
| 116 | ········</cpe-lang:platform> | ||
| 117 | ········<cpe-lang:platform·id="package_ | 112 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 120 | ··········</cpe-lang:logical-test> | ||
| 121 | ········</cpe-lang:platform> | ||
| 122 | ········<cpe-lang:platform·id="package_pam"> | ||
| 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 115 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 125 | ··········</cpe-lang:logical-test> | 116 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 117 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 118 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 120 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 121 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 122 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 123 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 125 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 135 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 126 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 136 | ············</cpe-lang:logical-test> | 127 | ············</cpe-lang:logical-test> |
| 137 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 128 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 129 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 139 | ············</cpe-lang:logical-test> | 130 | ············</cpe-lang:logical-test> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 140 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 141 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 142 | ········<cpe-lang:platform·id=" | 134 | ········<cpe-lang:platform·id="grub2"> |
| 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 146 | ············</cpe-lang:logical-test> | ||
| 147 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ············ | 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 149 | ············</cpe-lang:logical-test> | ||
| 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 151 | ··········</cpe-lang:logical-test> | 137 | ··········</cpe-lang:logical-test> |
| 152 | ········</cpe-lang:platform> | 138 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id="aa | 139 | ········<cpe-lang:platform·id="package_iptables"> |
| 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 156 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id="machine"> | 144 | ········<cpe-lang:platform·id="machine"> |
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 161 | ··········</cpe-lang:logical-test> | 147 | ··········</cpe-lang:logical-test> |
| 162 | ········</cpe-lang:platform> | 148 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id="package_ | 149 | ········<cpe-lang:platform·id="package_pam"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 166 | ··········</cpe-lang:logical-test> | 152 | ··········</cpe-lang:logical-test> |
| 167 | ········</cpe-lang:platform> | 153 | ········</cpe-lang:platform> |
| 168 | ········<cpe-lang:platform·id="package_g | 154 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 158 | ············</cpe-lang:logical-test> | ||
| 159 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 160 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 161 | ············</cpe-lang:logical-test> | ||
| 171 | ··········</cpe-lang:logical-test> | 162 | ··········</cpe-lang:logical-test> |
| 172 | ········</cpe-lang:platform> | 163 | ········</cpe-lang:platform> |
| 173 | ········<cpe-lang:platform·id="package_logrotate"> | 164 | ········<cpe-lang:platform·id="package_logrotate"> |
| 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 176 | ··········</cpe-lang:logical-test> | 167 | ··········</cpe-lang:logical-test> |
| 177 | ········</cpe-lang:platform> | 168 | ········</cpe-lang:platform> |
| 178 | ········<cpe-lang:platform·id="package_postfix"> | ||
| 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 181 | ··········</cpe-lang:logical-test> | ||
| 182 | ········</cpe-lang:platform> | ||
| 183 | ········<cpe-lang:platform·id="package_net-snmp"> | ||
| 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> | ||
| 186 | ··········</cpe-lang:logical-test> | ||
| 187 | ········</cpe-lang:platform> | ||
| 188 | ········<cpe-lang:platform·id="package_ntp"> | 169 | ········<cpe-lang:platform·id="package_ntp"> |
| 189 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 191 | ··········</cpe-lang:logical-test> | 172 | ··········</cpe-lang:logical-test> |
| 192 | ········</cpe-lang:platform> | 173 | ········</cpe-lang:platform> |
| 193 | ········<cpe-lang:platform·id="machine_and_package_sn | 174 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 197 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| Max diff block lines reached; 809955/822241 bytes (98.51%) of diff not shown. | |||
| Offset 3, 4251 lines modified | Offset 3, 4251 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fremovexattr_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fremovexattr</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fremovexattr_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_binary_dirs_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·that·System·Executables·Have·Restrictive·Permissions</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>All·GIDs·referenced·in·/etc/passwd·must·be·defined·in·/etc/group</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-gid_passwd_group_same_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·SSH·Support·for·.rhosts·Files</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_o | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_group_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·Permissions·on·Backup·group·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_o | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_timeout_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Kernel·panic·timeout</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_timeout_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-set_ip | 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·IPv6·Addressing·on·IPv6·Interfaces·by·Default</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-set_ip | 55 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_randomize_va_space_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Randomized·Layout·of·Virtual·Address·Space</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_randomize_va_space_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·open_by_handle_at</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_passwd_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·Group·Who·Owns·Backup·passwd·File</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-grub2_l1tf_argument_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Configure·L1·Terminal·Fault·mitigations</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-grub2_l1tf_argument_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lremovexattr_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_retpoline_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Avoid·speculative·indirect·branches·in·kernel</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_retpoline_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_tallylog_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·tallylog</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_tallylog_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·SMEP·is·not·disabled·during·boot</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmep_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyslog_enabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·rsyslog·Service</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_rsyslog_enabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-a | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmodat</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-a | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmodat_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·All·Account·Password·Hashes·are·Shadowed</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_all_shadowed_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_disabled_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-ser | 121 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spectre_v2_argument_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>En | 125 | ······<ocil:title>Enforce·Spectre·v2·mitigation</ocil:title> |
| Max diff block lines reached; 705161/718115 bytes (98.20%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Debian·11.·It·is·a·rendering·of | 7 | configuration·settings·for·Debian·11.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 158 lines modified | Offset 72, 158 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="package_pam"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 90 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 92 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 93 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 103 | ········</cpe-lang:logical-test> | 94 | ········</cpe-lang:logical-test> |
| 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 106 | ········</cpe-lang:logical-test> | 97 | ········</cpe-lang:logical-test> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="grub2"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ········ | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 118 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="aa | 106 | ····<cpe-lang:platform·id="package_iptables"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="machine"> | 111 | ····<cpe-lang:platform·id="machine"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 116 | ····<cpe-lang:platform·id="package_pam"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_g | 121 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 125 | ········</cpe-lang:logical-test> | ||
| 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | ||
| 138 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_logrotate"> | 131 | ····<cpe-lang:platform·id="package_logrotate"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 150 | ····<cpe-lang:platform·id="package_net-snmp"> | ||
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_net-snmp:def:1"/> | ||
| 153 | ······</cpe-lang:logical-test> | ||
| 154 | ····</cpe-lang:platform> | ||
| 155 | ····<cpe-lang:platform·id="package_ntp"> | 136 | ····<cpe-lang:platform·id="package_ntp"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="machine_and_package_sn | 141 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 164 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 148 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 167 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 154 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 172 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | 159 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| Max diff block lines reached; 55341/67254 bytes (82.29%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·12</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·12</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Debian·12.·It·is·a·rendering·of | 7 | configuration·settings·for·Debian·12.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 256 lines modified | Offset 71, 256 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_audit"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_pam"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="selinux"> | 78 | ····<cpe-lang:platform·id="selinux"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_ | 89 | ····<cpe-lang:platform·id="package_nftables"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="machine_and_ | 94 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> | ||
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-p | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="package_libreswan"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 131 | ········ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 132 | ········</cpe-lang:logical-test> | ||
| 133 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 110 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 139 | ········</cpe-lang:logical-test> | 114 | ········</cpe-lang:logical-test> |
| 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 142 | ········</cpe-lang:logical-test> | 117 | ········</cpe-lang:logical-test> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="machine_and_mount_ | 121 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="grub2"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 132 | ····<cpe-lang:platform·id="package_iptables"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 137 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="machine"> | 142 | ····<cpe-lang:platform·id="machine"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="package_pam"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 183 | ····<cpe-lang:platform·id="package_ | 152 | ····<cpe-lang:platform·id="package_bash"> |
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| Max diff block lines reached; 79686/92321 bytes (86.31%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····1651 | 2 | -rw-r--r--···0········0········0····16516·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·323 | 3 | -rw-r--r--···0········0········0·32361732·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14295, 15 lines modified | Offset 14295, 15 lines modified | ||
| 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037dd0:·2032·3032·3 | 00037dd0:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15105, 80 lines modified | Offset 15105, 80 lines modified | ||
| 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | ||
| 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b070:·6469·6174·696f·6e20·4 | 0003b070:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b080:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b090:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0c0:·2220·6964·3d22·6964·6d31·3332·3122·3e3c··"·id="idm1321">< | |||
| 0003b0d0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b0e0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0f0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b100:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b080:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003b0c0:·3332·3122·3e3c·7461·626c·6520·636c·6173··321"><table·clas | |||
| 0003b0d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b100:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b110:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b120:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b130:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b140:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b160:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b170:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b180:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b190:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b1a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1c0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1d0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1e0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1f0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b200:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b210:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b220:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b230:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b240:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b250:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b260:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b290:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b2c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b2d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b2e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b2f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b300:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b310:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b320:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b330:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b340:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b | 0003b110:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b360:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b370:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b380:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b390:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003b3a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b3b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b3e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b400:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b410:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b420:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b430:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b440:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b450:·646d·3133·3232·223e·3c70·7265·3e3c·636f··dm1322"><pre><co | |||
| 0003b460:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b470:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b | 0003b120:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b130:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b140:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b150:·7267·6574·3d22·2369·646d·3133·3232·2220··rget="#idm1322"· | |||
| 0003b160:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b170:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b180:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b190:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b1a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b1b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1c0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b1d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b200:·2220·6964·3d22·6964·6d31·3332·3222·3e3c··"·id="idm1322">< | |||
| 0003b210:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b220:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b230:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b240:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b250:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b260:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b270:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b280:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b290:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b2c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b2e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b2f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 229746/240562 bytes (95.50%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 143, 19 lines modified | Offset 148, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_aide | 160 | include·install_aide |
| Offset 761, 14 lines modified | Offset 761, 19 lines modified | ||
| 761 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 761 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 762 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 762 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 763 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 763 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 764 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 764 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 765 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 765 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 766 | ············_\x8c_\x8i_\x8s·····4.3.1 | 766 | ············_\x8c_\x8i_\x8s·····4.3.1 |
| 767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 769 | [[packages]] | ||
| 770 | name·=·"sudo" | ||
| 771 | version·=·"*" | ||
| 768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 772 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 769 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 773 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 770 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 774 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 771 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 775 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 772 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 776 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 773 | -·name:·Ensure·sudo·is·installed | 777 | -·name:·Ensure·sudo·is·installed |
| 774 | ··package: | 778 | ··package: |
| Offset 780, 19 lines modified | Offset 785, 14 lines modified | ||
| 780 | ··-·PCI-DSSv4-2.2.6 | 785 | ··-·PCI-DSSv4-2.2.6 |
| 781 | ··-·enable_strategy | 786 | ··-·enable_strategy |
| 782 | ··-·low_complexity | 787 | ··-·low_complexity |
| 783 | ··-·low_disruption | 788 | ··-·low_disruption |
| 784 | ··-·medium_severity | 789 | ··-·medium_severity |
| 785 | ··-·no_reboot_needed | 790 | ··-·no_reboot_needed |
| 786 | ··-·package_sudo_installed | 791 | ··-·package_sudo_installed |
| 787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 788 | [[packages]] | ||
| 789 | name·=·"sudo" | ||
| 790 | version·=·"*" | ||
| 791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 792 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 792 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 793 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 793 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 794 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 794 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 795 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 795 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 796 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 796 | include·install_sudo | 797 | include·install_sudo |
| Offset 9082, 14 lines modified | Offset 9082, 18 lines modified | ||
| 9082 | ············disruption·to·system·processes. | 9082 | ············disruption·to·system·processes. |
| 9083 | Severity: ··medium | 9083 | Severity: ··medium |
| 9084 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled | 9084 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled |
| 9085 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 | 9085 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 |
| 9086 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 | 9086 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 |
| 9087 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 | 9087 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 |
| 9088 | ············_\x8c_\x8i_\x8s····5.1.2.2 | 9088 | ············_\x8c_\x8i_\x8s····5.1.2.2 |
| 9089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9090 | [customizations.services] | ||
| 9091 | enabled·=·["systemd-journald"] | ||
| 9089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9090 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9093 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9091 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9094 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9092 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9095 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9093 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9096 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9094 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald | 9097 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald |
| 9095 | ··block: | 9098 | ··block: |
| Offset 9111, 18 lines modified | Offset 9115, 14 lines modified | ||
| 9111 | ··-·NIST-800-53-SC-24 | 9115 | ··-·NIST-800-53-SC-24 |
| 9112 | ··-·enable_strategy | 9116 | ··-·enable_strategy |
| 9113 | ··-·low_complexity | 9117 | ··-·low_complexity |
| 9114 | ··-·low_disruption | 9118 | ··-·low_disruption |
| 9115 | ··-·medium_severity | 9119 | ··-·medium_severity |
| 9116 | ··-·no_reboot_needed | 9120 | ··-·no_reboot_needed |
| 9117 | ··-·service_systemd-journald_enabled | 9121 | ··-·service_systemd-journald_enabled |
| 9118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9119 | [customizations.services] | ||
| 9120 | enabled·=·["systemd-journald"] | ||
| 9121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 18888/24254 bytes (77.88%) of diff not shown. | |||
| Offset 14295, 16 lines modified | Offset 14295, 16 lines modified | ||
| 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037de0:·313 | 00037de0:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15078, 80 lines modified | Offset 15078, 80 lines modified | ||
| 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | ||
| 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003aec0:·6961·7469·6f6e·204 | 0003aec0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003aed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af00:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003af10:·3231·223e·3c74·6162·6c65·2063·6c61·7373··21"><table·class | |||
| 0003af20:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003af30:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003af40:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003af50:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003af60:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003af70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af80:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003af90:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003afa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afb0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003afc0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003afd0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003afe0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003aff0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b000:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b010:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b020:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b030:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b040:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b050:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b060:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b070:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b080:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b090:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b0a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b0b0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b0c0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b0d0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b0e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b110:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b120:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b130:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b140:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b150:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003 | 0003aed0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003aee0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aef0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af10:·2069·643d·2269·646d·3133·3231·223e·3c70···id="idm1321"><p | |||
| 0003af20:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003af30:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003af40:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003af50:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003af60:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003af70:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003af80:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003af90:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003afa0:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003afb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003afc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003afd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003afe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aff0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b000:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b010:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b020:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b030:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b040:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b050:·2069·643d·2269·646d·3133·3232·223e·3c74···id="idm1322"><t | |||
| 0003b060:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b070:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b080:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b090:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b0a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b0b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b0c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b0e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b0f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b100:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b110:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b120:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b130:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b140:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b150:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b160:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b170:· | 0003b170:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | ||
| 0003b180:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b190:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b1a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1e0:·6574·3d22·2369·646d·3133·3232·2220·7461··et="#idm1322"·ta | |||
| 0003b1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b250:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| Max diff block lines reached; 131734/142688 bytes (92.32%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 19 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 135 | ··package: |
| Offset 139, 19 lines modified | Offset 144, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 146 | ··-·low_complexity |
| 142 | ··-·low_disruption | 147 | ··-·low_disruption |
| 143 | ··-·medium_severity | 148 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 156 | include·install_aide |
| Offset 661, 14 lines modified | Offset 661, 19 lines modified | ||
| 661 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 661 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 662 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 662 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 663 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 663 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 664 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 664 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 665 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 665 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 666 | ············_\x8c_\x8i_\x8s·····4.3.1 | 666 | ············_\x8c_\x8i_\x8s·····4.3.1 |
| 667 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 667 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 669 | [[packages]] | ||
| 670 | name·=·"sudo" | ||
| 671 | version·=·"*" | ||
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 669 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 670 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 671 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 672 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 673 | -·name:·Ensure·sudo·is·installed | 677 | -·name:·Ensure·sudo·is·installed |
| 674 | ··package: | 678 | ··package: |
| Offset 680, 19 lines modified | Offset 685, 14 lines modified | ||
| 680 | ··-·PCI-DSSv4-2.2.6 | 685 | ··-·PCI-DSSv4-2.2.6 |
| 681 | ··-·enable_strategy | 686 | ··-·enable_strategy |
| 682 | ··-·low_complexity | 687 | ··-·low_complexity |
| 683 | ··-·low_disruption | 688 | ··-·low_disruption |
| 684 | ··-·medium_severity | 689 | ··-·medium_severity |
| 685 | ··-·no_reboot_needed | 690 | ··-·no_reboot_needed |
| 686 | ··-·package_sudo_installed | 691 | ··-·package_sudo_installed |
| 687 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 688 | [[packages]] | ||
| 689 | name·=·"sudo" | ||
| 690 | version·=·"*" | ||
| 691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 692 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 693 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 693 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 694 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 694 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 695 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 695 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 696 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 696 | include·install_sudo | 697 | include·install_sudo |
| Offset 8982, 14 lines modified | Offset 8982, 18 lines modified | ||
| 8982 | ············disruption·to·system·processes. | 8982 | ············disruption·to·system·processes. |
| 8983 | Severity: ··medium | 8983 | Severity: ··medium |
| 8984 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled | 8984 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled |
| 8985 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 | 8985 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 |
| 8986 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 | 8986 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 |
| 8987 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 | 8987 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 |
| 8988 | ············_\x8c_\x8i_\x8s····5.1.2.2 | 8988 | ············_\x8c_\x8i_\x8s····5.1.2.2 |
| 8989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8990 | [customizations.services] | ||
| 8991 | enabled·=·["systemd-journald"] | ||
| 8989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8992 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8990 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8993 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8991 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8994 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8992 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8995 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8993 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8996 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8994 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald | 8997 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald |
| 8995 | ··block: | 8998 | ··block: |
| Offset 9011, 18 lines modified | Offset 9015, 14 lines modified | ||
| 9011 | ··-·NIST-800-53-SC-24 | 9015 | ··-·NIST-800-53-SC-24 |
| 9012 | ··-·enable_strategy | 9016 | ··-·enable_strategy |
| 9013 | ··-·low_complexity | 9017 | ··-·low_complexity |
| 9014 | ··-·low_disruption | 9018 | ··-·low_disruption |
| 9015 | ··-·medium_severity | 9019 | ··-·medium_severity |
| 9016 | ··-·no_reboot_needed | 9020 | ··-·no_reboot_needed |
| 9017 | ··-·service_systemd-journald_enabled | 9021 | ··-·service_systemd-journald_enabled |
| 9018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9019 | [customizations.services] | ||
| 9020 | enabled·=·["systemd-journald"] | ||
| 9021 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9022 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9659/15035 bytes (64.24%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15468, 80 lines modified | Offset 15468, 80 lines modified | ||
| 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | ||
| 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c720:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003c730:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c740:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c750:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c760:·2220·6964·3d22·6964·6d31·3138·3622·3e3c··"·id="idm1186">< | |||
| 0003c770:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c780:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c790:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c7a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c7b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c7c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c7d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c7e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c7f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c800:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c810:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c820:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c | 0003c720:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003c730:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003c740:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c750:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c760:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c770:·6964·6d31·3138·3622·3e3c·7072·653e·3c63··idm1186"><pre><c | |||
| 0003c780:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003c790:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003c7a0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003c7b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c7c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c7d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c7e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c7f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c800:·2369·646d·3131·3837·2220·7461·6269·6e64··#idm1187"·tabind | |||
| 0003c810:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c820:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c830:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c840:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c850:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c860:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003c870:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003c880:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c890:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c8a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c8b0:·6964·6d31·3138·3722·3e3c·7461·626c·6520··idm1187"><table· | |||
| 0003c8c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c8d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c8e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c8f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c900:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c910:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c920:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c930:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c940:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c950:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c | 0003c960:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c970:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c980:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c990:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c9a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c9b0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003c9c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003c850:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c860:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c870:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c880:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c890:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c8a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c8b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c8c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c8d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c8e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c8f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c900:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c910:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c920:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c930:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003c940:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003c950:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c960:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c970:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003c980:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003c990:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003c9a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003c9b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003c9c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003c9d0:·640a·2020· | 0003c9d0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 0003c9e0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c9f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ca00:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ca10:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ca20:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ca30:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ca40:·6964·6d31·3138·3722·2074·6162·696e·6465··idm1187"·tabinde | |||
| 0003ca50:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ca60:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ca70:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ca80:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ca90:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003caa0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003cab0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003cac0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003cad0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003cae0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003caf0:·7073·6522·2069·643d·2269·646d·3131·3837··pse"·id="idm1187 | |||
| 0003cb00:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| Max diff block lines reached; 184532/195348 bytes (94.46%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 160, 14 lines modified | Offset 160, 19 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | -·name:·Ensure·aide·is·installed | 176 | -·name:·Ensure·aide·is·installed |
| 173 | ··package: | 177 | ··package: |
| Offset 181, 19 lines modified | Offset 186, 14 lines modified | ||
| 181 | ··-·PCI-DSSv4-11.5.2 | 186 | ··-·PCI-DSSv4-11.5.2 |
| 182 | ··-·enable_strategy | 187 | ··-·enable_strategy |
| 183 | ··-·low_complexity | 188 | ··-·low_complexity |
| 184 | ··-·low_disruption | 189 | ··-·low_disruption |
| 185 | ··-·medium_severity | 190 | ··-·medium_severity |
| 186 | ··-·no_reboot_needed | 191 | ··-·no_reboot_needed |
| 187 | ··-·package_aide_installed | 192 | ··-·package_aide_installed |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | [[packages]] | ||
| 190 | name·=·"aide" | ||
| 191 | version·=·"*" | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | 198 | include·install_aide |
| Offset 4635, 14 lines modified | Offset 4635, 19 lines modified | ||
| 4635 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4635 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4636 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4636 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4637 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4637 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4638 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4638 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4639 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4639 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4640 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4640 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4641 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4641 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4643 | [[packages]] | ||
| 4644 | name·=·"logrotate" | ||
| 4645 | version·=·"*" | ||
| 4642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4647 | -·name:·Ensure·logrotate·is·installed | 4651 | -·name:·Ensure·logrotate·is·installed |
| 4648 | ··package: | 4652 | ··package: |
| Offset 4655, 19 lines modified | Offset 4660, 14 lines modified | ||
| 4655 | ··-·PCI-DSSv4-10.5.1 | 4660 | ··-·PCI-DSSv4-10.5.1 |
| 4656 | ··-·enable_strategy | 4661 | ··-·enable_strategy |
| 4657 | ··-·low_complexity | 4662 | ··-·low_complexity |
| 4658 | ··-·low_disruption | 4663 | ··-·low_disruption |
| 4659 | ··-·medium_severity | 4664 | ··-·medium_severity |
| 4660 | ··-·no_reboot_needed | 4665 | ··-·no_reboot_needed |
| 4661 | ··-·package_logrotate_installed | 4666 | ··-·package_logrotate_installed |
| 4662 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4663 | [[packages]] | ||
| 4664 | name·=·"logrotate" | ||
| 4665 | version·=·"*" | ||
| 4666 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4667 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4667 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4668 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4668 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4669 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4669 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4670 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4670 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4671 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4671 | include·install_logrotate | 4672 | include·install_logrotate |
| Offset 4782, 14 lines modified | Offset 4782, 19 lines modified | ||
| 4782 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4782 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4783 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4783 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4784 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4784 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4785 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4785 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4786 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4786 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4787 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4787 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4788 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4788 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4790 | [[packages]] | ||
| 4791 | name·=·"firewalld" | ||
| 4792 | version·=·"*" | ||
| 4789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4793 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4790 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4794 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4791 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4795 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4792 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4796 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4793 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4797 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4794 | -·name:·Ensure·firewalld·is·installed | 4798 | -·name:·Ensure·firewalld·is·installed |
| 4795 | ··package: | 4799 | ··package: |
| Offset 4801, 19 lines modified | Offset 4806, 14 lines modified | ||
| 4801 | ··-·PCI-DSSv4-1.2.1 | 4806 | ··-·PCI-DSSv4-1.2.1 |
| 4802 | ··-·enable_strategy | 4807 | ··-·enable_strategy |
| 4803 | ··-·low_complexity | 4808 | ··-·low_complexity |
| 4804 | ··-·low_disruption | 4809 | ··-·low_disruption |
| 4805 | ··-·medium_severity | 4810 | ··-·medium_severity |
| 4806 | ··-·no_reboot_needed | 4811 | ··-·no_reboot_needed |
| 4807 | ··-·package_firewalld_installed | 4812 | ··-·package_firewalld_installed |
| 4808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4809 | [[packages]] | ||
| 4810 | name·=·"firewalld" | ||
| Max diff block lines reached; 14465/20084 bytes (72.02%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 19675, 133 lines modified | Offset 19675, 133 lines modified | ||
| 0004cda0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004cda0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004cdb0:·646d·3638·3333·2220·7461·6269·6e64·6578··dm6833"·tabindex | 0004cdb0:·646d·3638·3333·2220·7461·6269·6e64·6578··dm6833"·tabindex | ||
| 0004cdc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0004cdc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004cdd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0004cdd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004cde0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0004cde0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004cdf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0004cdf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004ce00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0004ce00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004ce10:·6d65·6469·6174·696f·6e20·4 | 0004ce10:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0004ce20:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0004ce30:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004ce40:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004ce50:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004ce60:·6d36·3833·3322·3e3c·7461·626c·6520·636c··m6833"><table·cl | |||
| 0004ce70:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0004ce80:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0004ce90:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0004cea0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0004ceb0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0004cec0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004ced0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004cee0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0004cef0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004cf00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0004cf10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0004cf20:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0004c | 0004ce20:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0004ce30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004ce40:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004ce50:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004ce60:·7365·2220·6964·3d22·6964·6d36·3833·3322··se"·id="idm6833" | |||
| 0004ce70:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 0004ce80:·7374·6f6d·697a·6174·696f·6e73·2e73·6572··stomizations.ser | |||
| 0004ce90:·7669·6365·735d·0a65·6e61·626c·6564·203d··vices].enabled·= | |||
| 0004cea0:·205b·2266·6972·6577·616c·6c64·225d·0a3c···["firewalld"].< | |||
| 0004ceb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0004cec0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0004ced0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0004cee0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0004cef0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0004cf00:·2223·6964·6d36·3833·3422·2074·6162·696e··"#idm6834"·tabin | |||
| 0004cf10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0004cf20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0004cf30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0004cf40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0004cf50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0004cf60:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0004cf70:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0004cf80:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004cf90:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004cfa0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004cfb0:·2269·646d·3638·3334·223e·3c74·6162·6c65··"idm6834"><table | |||
| 0004cfc0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0004cfd0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0004cfe0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0004cff0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0004d000:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0004d010:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004d020:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004d030:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004 | 0004d040:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0004d050:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004d060:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0004d070:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0004d080:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0004d090:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0004d0a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0004d0b0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0004d0c0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0004d0d0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0004d0e0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0004d0f0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0004cf50:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0004cf60:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0004cf70:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0004cf80:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0004cf90:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0004cfa0:·746f·0a20·2074·6167·733a·0a20·202d·204e··to.··tags:.··-·N | |||
| 0004cfb0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | |||
| 0004cfc0:·330a·2020·2d20·4e49·5354·2d38·3030·2d31··3.··-·NIST-800-1 | |||
| 0004cfd0:·3731·2d33·2e34·2e37·0a20·202d·204e·4953··71-3.4.7.··-·NIS | |||
| 0004cfe0:·542d·3830·302d·3533·2d41·432d·340a·2020··T-800-53-AC-4.·· | |||
| 0004cff0:·2d20·4e49·5354·2d38·3030·2d35·332d·4341··-·NIST-800-53-CA | |||
| 0004d000:·2d33·2835·290a·2020·2d20·4e49·5354·2d38··-3(5).··-·NIST-8 | |||
| 0004d010:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0004d | 0004d100:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0004d030:·2d37·2862·290a·2020·2d20·4e49·5354·2d38··-7(b).··-·NIST-8 | |||
| 0004d040:·3030·2d35·332d·5343·2d37·2832·3129·0a20··00-53-SC-7(21).· | |||
| 0004d050:·202d·2050·4349·2d44·5353·7634·2d31·2e32···-·PCI-DSSv4-1.2 | |||
| 0004d060:·2e31·0a20·202d·2065·6e61·626c·655f·7374··.1.··-·enable_st | |||
| 0004d070:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0004d080:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004d090:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004d0a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004d0b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004d0c0:·6565·6465·640a·2020·2d20·7365·7276·6963··eeded.··-·servic | |||
| 0004d0d0:·655f·6669·7265·7761·6c6c·645f·656e·6162··e_firewalld_enab | |||
| 0004d0e0:·6c65·640a·0a2d·206e·616d·653a·2056·6572··led..-·name:·Ver | |||
| 0004d0f0:·6966·7920·6669·7265·7761·6c6c·6420·456e··ify·firewalld·En | |||
| 0004d1 | 0004d110:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | ||
| 0004d120:·302d·3137·312d·332e·342e·370a·2020·2d20··0-171-3.4.7.··-· | |||
| 0004d130:·4e49·5354·2d38·3030·2d35·332d·4143·2d34··NIST-800-53-AC-4 | |||
| 0004d140:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d150:·2d43·412d·3328·3529·0a20·202d·204e·4953··-CA-3(5).··-·NIS | |||
| 0004d160:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0004d170:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d180:·2d43·4d2d·3728·6229·0a20·202d·204e·4953··-CM-7(b).··-·NIS | |||
| 0004d190:·542d·3830·302d·3533·2d53·432d·3728·3231··T-800-53-SC-7(21 | |||
| 0004d1a0:·290a·2020·2d20·5043·492d·4453·5376·342d··).··-·PCI-DSSv4- | |||
| 0004d1b0:·312e·322e·310a·2020·2d20·656e·6162·6c65··1.2.1.··-·enable | |||
| 0004d1c0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0004d1d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 188980/207112 bytes (91.25%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1016, 14 lines modified | Offset 1016, 18 lines modified | ||
| 1016 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 1016 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 1017 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 1017 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 1018 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 1018 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 1019 | ···························SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS- | 1019 | ···························SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS- |
| 1020 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480- | 1020 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480- |
| 1021 | ···························GPOS-00232 | 1021 | ···························GPOS-00232 |
| 1022 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 1022 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 1023 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1024 | [customizations.services] | ||
| 1025 | enabled·=·["firewalld"] | ||
| 1023 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1024 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1025 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1026 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1027 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1028 | -·name:·Gather·the·package·facts | 1031 | -·name:·Gather·the·package·facts |
| 1029 | ··package_facts: | 1032 | ··package_facts: |
| Offset 1074, 18 lines modified | Offset 1078, 14 lines modified | ||
| 1074 | ··-·PCI-DSSv4-1.2.1 | 1078 | ··-·PCI-DSSv4-1.2.1 |
| 1075 | ··-·enable_strategy | 1079 | ··-·enable_strategy |
| 1076 | ··-·low_complexity | 1080 | ··-·low_complexity |
| 1077 | ··-·low_disruption | 1081 | ··-·low_disruption |
| 1078 | ··-·medium_severity | 1082 | ··-·medium_severity |
| 1079 | ··-·no_reboot_needed | 1083 | ··-·no_reboot_needed |
| 1080 | ··-·service_firewalld_enabled | 1084 | ··-·service_firewalld_enabled |
| 1081 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1082 | [customizations.services] | ||
| 1083 | enabled·=·["firewalld"] | ||
| 1084 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1085 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1085 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1086 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1086 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1087 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1087 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1088 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1088 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1089 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1089 | include·enable_firewalld | 1090 | include·enable_firewalld |
| Offset 1206, 14 lines modified | Offset 1206, 18 lines modified | ||
| 1206 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 1206 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 1207 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 1207 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 1208 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 1208 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 1209 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1209 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 1210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 1211 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- | 1211 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- |
| 1212 | ···························000480-GPOS-00227 | 1212 | ···························000480-GPOS-00227 |
| 1213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1214 | [customizations.services] | ||
| 1215 | masked·=·["autofs"] | ||
| 1213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1218 | -·name:·Gather·the·package·facts | 1221 | -·name:·Gather·the·package·facts |
| 1219 | ··package_facts: | 1222 | ··package_facts: |
| Offset 1316, 18 lines modified | Offset 1320, 14 lines modified | ||
| 1316 | ··-·NIST-800-53-MP-7 | 1320 | ··-·NIST-800-53-MP-7 |
| 1317 | ··-·disable_strategy | 1321 | ··-·disable_strategy |
| 1318 | ··-·low_complexity | 1322 | ··-·low_complexity |
| 1319 | ··-·low_disruption | 1323 | ··-·low_disruption |
| 1320 | ··-·medium_severity | 1324 | ··-·medium_severity |
| 1321 | ··-·no_reboot_needed | 1325 | ··-·no_reboot_needed |
| 1322 | ··-·service_autofs_disabled | 1326 | ··-·service_autofs_disabled |
| 1323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1324 | [customizations.services] | ||
| 1325 | masked·=·["autofs"] | ||
| 1326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1331 | include·disable_autofs | 1332 | include·disable_autofs |
| Offset 1406, 14 lines modified | Offset 1406, 18 lines modified | ||
| 1406 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1406 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1407 | ···························7.6 | 1407 | ···························7.6 |
| 1408 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1408 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1410 | ···························A.9.1.2 | 1410 | ···························A.9.1.2 |
| 1411 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1411 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1412 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1412 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1414 | [customizations.services] | ||
| 1415 | masked·=·["abrtd"] | ||
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1414 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1415 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1416 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1417 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1418 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present | 1421 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present |
| 1419 | ····in·the·System | 1422 | ····in·the·System |
| Offset 1487, 18 lines modified | Offset 1491, 14 lines modified | ||
| 1487 | ··-·NIST-800-53-CM-7(a) | 1491 | ··-·NIST-800-53-CM-7(a) |
| 1488 | ··-·disable_strategy | 1492 | ··-·disable_strategy |
| 1489 | ··-·low_complexity | 1493 | ··-·low_complexity |
| 1490 | ··-·low_disruption | 1494 | ··-·low_disruption |
| 1491 | ··-·medium_severity | 1495 | ··-·medium_severity |
| 1492 | ··-·no_reboot_needed | 1496 | ··-·no_reboot_needed |
| 1493 | ··-·service_abrtd_disabled | 1497 | ··-·service_abrtd_disabled |
| 1494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1495 | [customizations.services] | ||
| 1496 | masked·=·["abrtd"] | ||
| 1497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 8495/14460 bytes (58.75%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15826, 80 lines modified | Offset 15826, 80 lines modified | ||
| 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | ||
| 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd80:·656d·6564·6961·7469·6f6e·204 | 0003dd80:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003dd90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003dda0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ddb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ddc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ddd0:·646d·3132·3738·223e·3c74·6162·6c65·2063··dm1278"><table·c | |||
| 0003dde0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ddf0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003de00:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003de10:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003de20:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003de30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003de40:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003de50:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003de60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003de70:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003de80:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003de90:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003d | 0003dd90:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003dda0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ddb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ddc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ddd0:·7073·6522·2069·643d·2269·646d·3132·3738··pse"·id="idm1278 | |||
| 0003dde0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ddf0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003de00:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003de10:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003de20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003de30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003de40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003de50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003de60:·2d74·6172·6765·743d·2223·6964·6d31·3237··-target="#idm127 | |||
| 0003de70:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003de80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003de90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003dea0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003deb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003dec0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ded0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003dee0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003def0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003df00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003df10:·7073·6522·2069·643d·2269·646d·3132·3739··pse"·id="idm1279 | |||
| 0003df20:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003df30:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003df40:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003df50:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003df60:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003df70:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003df80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003df90:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003dfa0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003dfb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003dfc0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003d | 0003dfd0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003dfe0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003dff0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003e000:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003e010:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003e020:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003e030:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003e040:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003e050:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003e060:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003e070:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003e080:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003e090:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003e0a0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003e0b0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003e0c0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003e0d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003e0e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003e0f0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003e100:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003e110:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003e120:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003e130:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003e140:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003e150:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003e160:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003e170:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003e180:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003e190:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003dec0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ded0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003dee0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003def0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003df00:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003df10:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003df20:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003df30:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003df40:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003df50:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003df60:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003df70:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003df80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003df90:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003dfa0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003dfb0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003dfc0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003dfd0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003dfe0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003dff0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003e000:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 208842/219658 bytes (95.08%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 202, 14 lines modified | Offset 202, 19 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | [[packages]] | ||
| 211 | name·=·"aide" | ||
| 212 | version·=·"*" | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | -·name:·Ensure·aide·is·installed | 218 | -·name:·Ensure·aide·is·installed |
| 215 | ··package: | 219 | ··package: |
| Offset 223, 19 lines modified | Offset 228, 14 lines modified | ||
| 223 | ··-·PCI-DSSv4-11.5.2 | 228 | ··-·PCI-DSSv4-11.5.2 |
| 224 | ··-·enable_strategy | 229 | ··-·enable_strategy |
| 225 | ··-·low_complexity | 230 | ··-·low_complexity |
| 226 | ··-·low_disruption | 231 | ··-·low_disruption |
| 227 | ··-·medium_severity | 232 | ··-·medium_severity |
| 228 | ··-·no_reboot_needed | 233 | ··-·no_reboot_needed |
| 229 | ··-·package_aide_installed | 234 | ··-·package_aide_installed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 231 | [[packages]] | ||
| 232 | name·=·"aide" | ||
| 233 | version·=·"*" | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 239 | include·install_aide | 240 | include·install_aide |
| Offset 578, 14 lines modified | Offset 578, 19 lines modified | ||
| 578 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 578 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 579 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 579 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 580 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 580 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 581 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 581 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 582 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 582 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 583 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 583 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 584 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 584 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | [[packages]] | ||
| 587 | name·=·"sudo" | ||
| 588 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 590 | -·name:·Ensure·sudo·is·installed | 594 | -·name:·Ensure·sudo·is·installed |
| 591 | ··package: | 595 | ··package: |
| Offset 597, 19 lines modified | Offset 602, 14 lines modified | ||
| 597 | ··-·PCI-DSSv4-2.2.6 | 602 | ··-·PCI-DSSv4-2.2.6 |
| 598 | ··-·enable_strategy | 603 | ··-·enable_strategy |
| 599 | ··-·low_complexity | 604 | ··-·low_complexity |
| 600 | ··-·low_disruption | 605 | ··-·low_disruption |
| 601 | ··-·medium_severity | 606 | ··-·medium_severity |
| 602 | ··-·no_reboot_needed | 607 | ··-·no_reboot_needed |
| 603 | ··-·package_sudo_installed | 608 | ··-·package_sudo_installed |
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 605 | [[packages]] | ||
| 606 | name·=·"sudo" | ||
| 607 | version·=·"*" | ||
| 608 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 609 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 609 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 610 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 610 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 611 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 611 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 612 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 612 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 613 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 613 | include·install_sudo | 614 | include·install_sudo |
| Offset 4358, 14 lines modified | Offset 4358, 19 lines modified | ||
| 4358 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4358 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4359 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4359 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4363 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4363 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4366 | [[packages]] | ||
| 4367 | name·=·"logrotate" | ||
| 4368 | version·=·"*" | ||
| 4365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4370 | -·name:·Ensure·logrotate·is·installed | 4374 | -·name:·Ensure·logrotate·is·installed |
| 4371 | ··package: | 4375 | ··package: |
| Offset 4378, 19 lines modified | Offset 4383, 14 lines modified | ||
| 4378 | ··-·PCI-DSSv4-10.5.1 | 4383 | ··-·PCI-DSSv4-10.5.1 |
| 4379 | ··-·enable_strategy | 4384 | ··-·enable_strategy |
| 4380 | ··-·low_complexity | 4385 | ··-·low_complexity |
| 4381 | ··-·low_disruption | 4386 | ··-·low_disruption |
| 4382 | ··-·medium_severity | 4387 | ··-·medium_severity |
| 4383 | ··-·no_reboot_needed | 4388 | ··-·no_reboot_needed |
| 4384 | ··-·package_logrotate_installed | 4389 | ··-·package_logrotate_installed |
| 4385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4386 | [[packages]] | ||
| 4387 | name·=·"logrotate" | ||
| Max diff block lines reached; 15822/21321 bytes (74.21%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 19859, 237 lines modified | Offset 19859, 237 lines modified | ||
| 0004d920:·6574·3d22·2369·646d·3131·3337·3422·2074··et="#idm11374"·t | 0004d920:·6574·3d22·2369·646d·3131·3337·3422·2074··et="#idm11374"·t | ||
| 0004d930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0004d930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0004d940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0004d940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0004d950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0004d950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0004d960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0004d960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0004d970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0004d970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0004d980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0004d980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0004d990:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0004d9a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0004d9b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0004d9c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0004d9d0:·2069·643d·2269·646d·3131·3337·3422·3e3c···id="idm11374">< | |||
| 0004d9e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0004d9 | 0004d990:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0004d9a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0004d9b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0004d9c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0004d9d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0004d9e0:·646d·3131·3337·3422·3e3c·7072·653e·3c63··dm11374"><pre><c | |||
| 0004d9f0:·6f64·653e·0a5b·6375·7374·6f6d·697a·6174··ode>.[customizat | |||
| 0004da00:·696f·6e73·2e73·6572·7669·6365·735d·0a6d··ions.services].m | |||
| 0004da10:·6173·6b65·6420·3d20·5b22·6175·746f·6673··asked·=·["autofs | |||
| 0004da20:·225d·0a3c·2f63·6f64·653e·3c2f·7072·653e··"].</code></pre> | |||
| 0004da30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0004da40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0004da50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0004da60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0004da70:·6765·743d·2223·6964·6d31·3133·3735·2220··get="#idm11375"· | |||
| 0004da80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0004da90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0004daa0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0004dab0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0004dac0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0004dad0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0004dae0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0004daf0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004db00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004db10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004db20:·2220·6964·3d22·6964·6d31·3133·3735·223e··"·id="idm11375"> | |||
| 0004db30:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0004db40:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0004db50:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0004d | 0004db60:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0004da10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0004d | 0004db70:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0004da30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0004da40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004da50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004da60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004da70:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004da80:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0004da90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004daa0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0004dab0:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | |||
| 0004dac0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004dad0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0004dae0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0004d | 0004db80:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0004db90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004dba0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004dbb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004dbc0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0004dbd0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0004dbe0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004dbf0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0004dc00:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | |||
| 0004dc10:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0004dc20:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0004dc30:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0004dc40:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0004d | 0004dc50:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0004d | 0004dc60:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0004dc70:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0004dc80:·302d·3137·312d·332e·342e·360a·2020·2d20··0-171-3.4.6.··-· | |||
| 0004dc90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0004d | 0004dca0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | ||
| 0004dcb0:·2d35·332d·434d·2d37·2861·290a·2020·2d20··-53-CM-7(a).··-· | |||
| 0004dcc0:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 0004dcd0:·2862·290a·2020·2d20·4e49·5354·2d38·3030··(b).··-·NIST-800 | |||
| 0004dce0:·2d35·332d·4d50·2d37·0a20·202d·2064·6973··-53-MP-7.··-·dis | |||
| 0004dcf0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0004dd00:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0004dd10:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0004dd20:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0004dd30:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0004dd40:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0004dd50:·2073·6572·7669·6365·5f61·7574·6f66·735f···service_autofs_ | |||
| 0004dd60:·6469·7361·626c·6564·0a0a·2d20·6e61·6d65··disabled..-·name | |||
| 0004dd70:·3a20·4469·7361·626c·6520·7468·6520·4175··:·Disable·the·Au | |||
| 0004dd80:·746f·6d6f·756e·7465·7220·2d20·436f·6c6c··tomounter·-·Coll | |||
| 0004dd90:·6563·7420·7379·7374·656d·6420·5365·7276··ect·systemd·Serv | |||
| 0004dda0:·6963·6573·2050·7265·7365·6e74·2069·6e20··ices·Present·in· | |||
| 0004ddb0:·7468·6520·5379·7374·656d·0a20·2061·6e73··the·System.··ans | |||
| 0004ddc0:·6962·6c65·2e62·7569·6c74·696e·2e63·6f6d··ible.builtin.com | |||
| 0004ddd0:·6d61·6e64·3a20·7379·7374·656d·6374·6c20··mand:·systemctl· | |||
| 0004dde0:·2d71·206c·6973·742d·756e·6974·2d66·696c··-q·list-unit-fil | |||
| 0004ddf0:·6573·202d·2d74·7970·6520·7365·7276·6963··es·--type·servic | |||
| 0004de00:·650a·2020·7265·6769·7374·6572·3a20·7365··e.··register:·se | |||
| 0004de10:·7276·6963·655f·6578·6973·7473·0a20·2063··rvice_exists.··c | |||
| 0004de20:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0004de30:·7365·0a20·2066·6169·6c65·645f·7768·656e··se.··failed_when | |||
| 0004de40:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 0004de50:·2e72·6320·6e6f·7420·696e·205b·302c·2031··.rc·not·in·[0,·1 | |||
| 0004de60:·5d0a·2020·6368·6563·6b5f·6d6f·6465·3a20··].··check_mode:· | |||
| 0004de70:·6661·6c73·650a·2020·7768·656e·3a20·2820··false.··when:·(· | |||
| 0004de80:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004de90:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004dea0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0004deb0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0004dec0:·706f·646d·616e·222c·0a20·2020·2022·636f··podman",.····"co | |||
| 0004ded0:·6e74·6169·6e65·7222·5d20·616e·6420·2261··ntainer"]·and·"a | |||
| Max diff block lines reached; 157074/189558 bytes (82.86%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 970, 14 lines modified | Offset 970, 18 lines modified | ||
| 970 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 970 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 971 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 971 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 972 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 972 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 973 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 973 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 974 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 974 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 975 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- | 975 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- |
| 976 | ···························000480-GPOS-00227 | 976 | ···························000480-GPOS-00227 |
| 977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 978 | [customizations.services] | ||
| 979 | masked·=·["autofs"] | ||
| 977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 980 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 978 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 981 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 979 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 982 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 980 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 983 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 981 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 984 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 982 | -·name:·Gather·the·package·facts | 985 | -·name:·Gather·the·package·facts |
| 983 | ··package_facts: | 986 | ··package_facts: |
| Offset 1080, 18 lines modified | Offset 1084, 14 lines modified | ||
| 1080 | ··-·NIST-800-53-MP-7 | 1084 | ··-·NIST-800-53-MP-7 |
| 1081 | ··-·disable_strategy | 1085 | ··-·disable_strategy |
| 1082 | ··-·low_complexity | 1086 | ··-·low_complexity |
| 1083 | ··-·low_disruption | 1087 | ··-·low_disruption |
| 1084 | ··-·medium_severity | 1088 | ··-·medium_severity |
| 1085 | ··-·no_reboot_needed | 1089 | ··-·no_reboot_needed |
| 1086 | ··-·service_autofs_disabled | 1090 | ··-·service_autofs_disabled |
| 1087 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1088 | [customizations.services] | ||
| 1089 | masked·=·["autofs"] | ||
| 1090 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1091 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1091 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1092 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1092 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1093 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1093 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1094 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1094 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1095 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1095 | include·disable_autofs | 1096 | include·disable_autofs |
| Offset 1144, 14 lines modified | Offset 1144, 18 lines modified | ||
| 1144 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1144 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1145 | ···························7.6 | 1145 | ···························7.6 |
| 1146 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1146 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1147 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1147 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1148 | ···························A.9.1.2 | 1148 | ···························A.9.1.2 |
| 1149 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1149 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1150 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1150 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1152 | [customizations.services] | ||
| 1153 | masked·=·["abrtd"] | ||
| 1151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1156 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present | 1159 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present |
| 1157 | ····in·the·System | 1160 | ····in·the·System |
| Offset 1225, 18 lines modified | Offset 1229, 14 lines modified | ||
| 1225 | ··-·NIST-800-53-CM-7(a) | 1229 | ··-·NIST-800-53-CM-7(a) |
| 1226 | ··-·disable_strategy | 1230 | ··-·disable_strategy |
| 1227 | ··-·low_complexity | 1231 | ··-·low_complexity |
| 1228 | ··-·low_disruption | 1232 | ··-·low_disruption |
| 1229 | ··-·medium_severity | 1233 | ··-·medium_severity |
| 1230 | ··-·no_reboot_needed | 1234 | ··-·no_reboot_needed |
| 1231 | ··-·service_abrtd_disabled | 1235 | ··-·service_abrtd_disabled |
| 1232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1233 | [customizations.services] | ||
| 1234 | masked·=·["abrtd"] | ||
| 1235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1240 | include·disable_abrtd | 1241 | include·disable_abrtd |
| Offset 1273, 14 lines modified | Offset 1273, 18 lines modified | ||
| 1273 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1273 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1274 | ···························7.6 | 1274 | ···························7.6 |
| 1275 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1275 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1277 | ···························A.9.1.2 | 1277 | ···························A.9.1.2 |
| 1278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 1278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 1279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1281 | [customizations.services] | ||
| 1282 | masked·=·["ntpdate"] | ||
| 1280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1281 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1282 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1283 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1284 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1285 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the | 1288 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the |
| 1286 | ····System | 1289 | ····System |
| Offset 1358, 18 lines modified | Offset 1362, 14 lines modified | ||
| 1358 | ··-·NIST-800-53-CM-7(b) | 1362 | ··-·NIST-800-53-CM-7(b) |
| 1359 | ··-·disable_strategy | 1363 | ··-·disable_strategy |
| 1360 | ··-·low_complexity | 1364 | ··-·low_complexity |
| 1361 | ··-·low_disruption | 1365 | ··-·low_disruption |
| 1362 | ··-·low_severity | 1366 | ··-·low_severity |
| 1363 | ··-·no_reboot_needed | 1367 | ··-·no_reboot_needed |
| 1364 | ··-·service_ntpdate_disabled | 1368 | ··-·service_ntpdate_disabled |
| 1365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1366 | [customizations.services] | ||
| 1367 | masked·=·["ntpdate"] | ||
| 1368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 6856/12852 bytes (53.35%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d80:·6f66·2032·3032·3 | 00037d80:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15458, 80 lines modified | Offset 15458, 80 lines modified | ||
| 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c680:·656d·6564·6961·7469·6f6e·204 | 0003c680:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003c690:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c6a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c6b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c6c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c6d0:·646d·3133·3338·223e·3c74·6162·6c65·2063··dm1338"><table·c | |||
| 0003c6e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c6f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c700:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c710:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c720:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c730:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c740:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c750:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c770:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c780:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c790:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c | 0003c690:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003c6a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c6b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c6c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c6d0:·7073·6522·2069·643d·2269·646d·3133·3338··pse"·id="idm1338 | |||
| 0003c6e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003c6f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003c700:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003c710:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003c720:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c730:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c740:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c750:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c760:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003c770:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003c780:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c790:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c7a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c7b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c7c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c7d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003c7e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c7f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c800:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c810:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003c820:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c830:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c840:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c850:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c860:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c870:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c880:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c890:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c8a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c8b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c8c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c | 0003c8d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c8e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c8f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c900:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c910:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003c920:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003c930:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003c940:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003c950:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003c960:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003c970:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003c980:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003c990:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003c9a0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003c9b0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003c9c0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003c9d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003c9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c9f0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ca00:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ca10:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ca20:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ca30:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003ca40:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003ca50:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003ca60:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003ca70:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003ca80:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003ca90:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c7c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c7d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003c7e0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003c7f0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003c800:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003c810:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003c820:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003c830:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003c840:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003c850:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003c860:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003c870:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003c880:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c890:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003c8a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c8b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c8c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c8d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c8e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c8f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c900:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 159358/170174 bytes (93.64%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:23 | 43 | ····*·cpe:/o:anolis:anolis_os:23 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 175 | ··package: |
| Offset 179, 19 lines modified | Offset 184, 14 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 186 | ··-·low_complexity |
| 182 | ··-·low_disruption | 187 | ··-·low_disruption |
| 183 | ··-·medium_severity | 188 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | 196 | include·install_aide |
| Offset 4518, 14 lines modified | Offset 4518, 19 lines modified | ||
| 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4526 | [[packages]] | ||
| 4527 | name·=·"logrotate" | ||
| 4528 | version·=·"*" | ||
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4530 | -·name:·Ensure·logrotate·is·installed | 4534 | -·name:·Ensure·logrotate·is·installed |
| 4531 | ··package: | 4535 | ··package: |
| Offset 4538, 19 lines modified | Offset 4543, 14 lines modified | ||
| 4538 | ··-·PCI-DSSv4-10.5.1 | 4543 | ··-·PCI-DSSv4-10.5.1 |
| 4539 | ··-·enable_strategy | 4544 | ··-·enable_strategy |
| 4540 | ··-·low_complexity | 4545 | ··-·low_complexity |
| 4541 | ··-·low_disruption | 4546 | ··-·low_disruption |
| 4542 | ··-·medium_severity | 4547 | ··-·medium_severity |
| 4543 | ··-·no_reboot_needed | 4548 | ··-·no_reboot_needed |
| 4544 | ··-·package_logrotate_installed | 4549 | ··-·package_logrotate_installed |
| 4545 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4546 | [[packages]] | ||
| 4547 | name·=·"logrotate" | ||
| 4548 | version·=·"*" | ||
| 4549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4550 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4550 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4551 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4551 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4552 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4552 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4553 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4553 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4554 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4554 | include·install_logrotate | 4555 | include·install_logrotate |
| Offset 4665, 14 lines modified | Offset 4665, 19 lines modified | ||
| 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4673 | [[packages]] | ||
| 4674 | name·=·"firewalld" | ||
| 4675 | version·=·"*" | ||
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4677 | -·name:·Ensure·firewalld·is·installed | 4681 | -·name:·Ensure·firewalld·is·installed |
| 4678 | ··package: | 4682 | ··package: |
| Offset 4684, 19 lines modified | Offset 4689, 14 lines modified | ||
| 4684 | ··-·PCI-DSSv4-1.2.1 | 4689 | ··-·PCI-DSSv4-1.2.1 |
| 4685 | ··-·enable_strategy | 4690 | ··-·enable_strategy |
| 4686 | ··-·low_complexity | 4691 | ··-·low_complexity |
| 4687 | ··-·low_disruption | 4692 | ··-·low_disruption |
| 4688 | ··-·medium_severity | 4693 | ··-·medium_severity |
| 4689 | ··-·no_reboot_needed | 4694 | ··-·no_reboot_needed |
| 4690 | ··-·package_firewalld_installed | 4695 | ··-·package_firewalld_installed |
| 4691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4692 | [[packages]] | ||
| 4693 | name·=·"firewalld" | ||
| Max diff block lines reached; 11286/16887 bytes (66.83%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15049, 80 lines modified | Offset 15049, 80 lines modified | ||
| 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | ||
| 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003acf0:·6469·6174·696f·6e20·4 | 0003acf0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003ad00:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ad10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ad20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ad30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ad40:·2220·6964·3d22·6964·6d31·3333·3822·3e3c··"·id="idm1338">< | |||
| 0003ad50:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003ad60:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003ad70:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003ad80:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003ad00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003ad40:·3333·3822·3e3c·7461·626c·6520·636c·6173··338"><table·clas | |||
| 0003ad50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ad60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ad70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ad80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ad90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ada0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003adb0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003adc0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003add0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ade0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003adf0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ae00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ae10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ae20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ae30:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ae40:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003ae50:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003ae60:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003ae70:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003ae80:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003ae90:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003aea0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003aeb0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003aec0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003aed0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003aee0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003aef0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003af00:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003af10:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003af20:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003af30:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003af40:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003af50:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003af60:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003af70:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003af80:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003af90:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003afa0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003afb0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003afc0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003a | 0003ad90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003afe0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aff0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b000:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b010:·6765·743d·2223·6964·6d31·3333·3922·2074··get="#idm1339"·t | |||
| 0003b020:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b030:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b040:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b050:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b060:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b070:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b080:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b090:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b0a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b0b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b0c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b0d0:·646d·3133·3339·223e·3c70·7265·3e3c·636f··dm1339"><pre><co | |||
| 0003b0e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b0f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003 | 0003ada0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003adb0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003adc0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003add0:·7267·6574·3d22·2369·646d·3133·3339·2220··rget="#idm1339"· | |||
| 0003ade0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003adf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003ae00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ae10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003ae20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ae30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003ae40:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003ae50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ae60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ae70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ae80:·2220·6964·3d22·6964·6d31·3333·3922·3e3c··"·id="idm1339">< | |||
| 0003ae90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003aea0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003aeb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003aec0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003aed0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003aee0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003aef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003af10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003af20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003af30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003af40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003af60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003af70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 484736/495552 bytes (97.82%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:23 | 41 | ····*·cpe:/o:anolis:anolis_os:23 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 135, 19 lines modified | Offset 140, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 152 | include·install_aide |
| Offset 4856, 14 lines modified | Offset 4856, 19 lines modified | ||
| 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 4862 | ···························00227 | 4862 | ···························00227 |
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4864 | [[packages]] | ||
| 4865 | name·=·"rsyslog" | ||
| 4866 | version·=·"*" | ||
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4868 | -·name:·Ensure·rsyslog·is·installed | 4872 | -·name:·Ensure·rsyslog·is·installed |
| 4869 | ··package: | 4873 | ··package: |
| Offset 4874, 19 lines modified | Offset 4879, 14 lines modified | ||
| 4874 | ··-·NIST-800-53-CM-6(a) | 4879 | ··-·NIST-800-53-CM-6(a) |
| 4875 | ··-·enable_strategy | 4880 | ··-·enable_strategy |
| 4876 | ··-·low_complexity | 4881 | ··-·low_complexity |
| 4877 | ··-·low_disruption | 4882 | ··-·low_disruption |
| 4878 | ··-·medium_severity | 4883 | ··-·medium_severity |
| 4879 | ··-·no_reboot_needed | 4884 | ··-·no_reboot_needed |
| 4880 | ··-·package_rsyslog_installed | 4885 | ··-·package_rsyslog_installed |
| 4881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4882 | [[packages]] | ||
| 4883 | name·=·"rsyslog" | ||
| 4884 | version·=·"*" | ||
| 4885 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4886 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4887 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4888 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4889 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4890 | include·install_rsyslog | 4891 | include·install_rsyslog |
| Offset 4912, 14 lines modified | Offset 4912, 18 lines modified | ||
| 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4920 | [customizations.services] | ||
| 4921 | enabled·=·["rsyslog"] | ||
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4924 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 4927 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 4925 | ··block: | 4928 | ··block: |
| Offset 4942, 18 lines modified | Offset 4946, 14 lines modified | ||
| 4942 | ··-·NIST-800-53-CM-6(a) | 4946 | ··-·NIST-800-53-CM-6(a) |
| 4943 | ··-·enable_strategy | 4947 | ··-·enable_strategy |
| 4944 | ··-·low_complexity | 4948 | ··-·low_complexity |
| 4945 | ··-·low_disruption | 4949 | ··-·low_disruption |
| 4946 | ··-·medium_severity | 4950 | ··-·medium_severity |
| 4947 | ··-·no_reboot_needed | 4951 | ··-·no_reboot_needed |
| 4948 | ··-·service_rsyslog_enabled | 4952 | ··-·service_rsyslog_enabled |
| 4949 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4950 | [customizations.services] | ||
| 4951 | enabled·=·["rsyslog"] | ||
| 4952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 34863/40809 bytes (85.43%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d70:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d70:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d80:·2d31·3 | 00037d80:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15457, 81 lines modified | Offset 15457, 81 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c680:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c690:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c6a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c6b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c6c0:·643d·2269·646d·3133·3338·223e·3c74·6162··d="idm1338"><tab | |||
| 0003c6d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c6e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c6f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c700:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c710:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c720:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c730:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c740:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c750:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c760:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c770:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c780:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c | 0003c680:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003c690:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c6a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c6b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c6c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c6d0:·3133·3338·223e·3c70·7265·3e3c·636f·6465··1338"><pre><code | |||
| 0003c6e0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003c6f0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003c700:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003c710:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c720:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c730:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c740:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c750:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c760:·6d31·3333·3922·2074·6162·696e·6465·783d··m1339"·tabindex= | |||
| 0003c770:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c780:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c790:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c7a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c7b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c7c0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003c7d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c7e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c7f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c800:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c810:·3133·3339·223e·3c74·6162·6c65·2063·6c61··1339"><table·cla | |||
| 0003c820:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c830:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c840:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c850:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c860:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c870:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c880:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c890:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c8a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c8b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c | 0003c8c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003c8d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c8e0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c8f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c900:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003c910:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003c920:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003c930:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003c940:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003c950:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003c960:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003c970:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003c980:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003c990:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003c9a0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003c9b0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003c9c0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003c9d0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003c9e0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c9f0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003ca00:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ca10:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c7b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c7c0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003c7d0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003c7e0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003c7f0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003c800:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003c810:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003c820:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003c830:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003c840:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003c850:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003c860:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003c870:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c880:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003c890:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c8a0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c8b0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c8c0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c8d0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c8e0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c8f0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c900:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c | 0003ca20:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003ca30:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ca40:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ca50:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ca60:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| Max diff block lines reached; 159220/170312 bytes (93.49%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:8 | 43 | ····*·cpe:/o:anolis:anolis_os:8 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 175 | ··package: |
| Offset 179, 19 lines modified | Offset 184, 14 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 186 | ··-·low_complexity |
| 182 | ··-·low_disruption | 187 | ··-·low_disruption |
| 183 | ··-·medium_severity | 188 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | 196 | include·install_aide |
| Offset 4518, 14 lines modified | Offset 4518, 19 lines modified | ||
| 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4526 | [[packages]] | ||
| 4527 | name·=·"logrotate" | ||
| 4528 | version·=·"*" | ||
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4530 | -·name:·Ensure·logrotate·is·installed | 4534 | -·name:·Ensure·logrotate·is·installed |
| 4531 | ··package: | 4535 | ··package: |
| Offset 4538, 19 lines modified | Offset 4543, 14 lines modified | ||
| 4538 | ··-·PCI-DSSv4-10.5.1 | 4543 | ··-·PCI-DSSv4-10.5.1 |
| 4539 | ··-·enable_strategy | 4544 | ··-·enable_strategy |
| 4540 | ··-·low_complexity | 4545 | ··-·low_complexity |
| 4541 | ··-·low_disruption | 4546 | ··-·low_disruption |
| 4542 | ··-·medium_severity | 4547 | ··-·medium_severity |
| 4543 | ··-·no_reboot_needed | 4548 | ··-·no_reboot_needed |
| 4544 | ··-·package_logrotate_installed | 4549 | ··-·package_logrotate_installed |
| 4545 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4546 | [[packages]] | ||
| 4547 | name·=·"logrotate" | ||
| 4548 | version·=·"*" | ||
| 4549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4550 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4550 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4551 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4551 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4552 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4552 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4553 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4553 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4554 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4554 | include·install_logrotate | 4555 | include·install_logrotate |
| Offset 4665, 14 lines modified | Offset 4665, 19 lines modified | ||
| 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4673 | [[packages]] | ||
| 4674 | name·=·"firewalld" | ||
| 4675 | version·=·"*" | ||
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4677 | -·name:·Ensure·firewalld·is·installed | 4681 | -·name:·Ensure·firewalld·is·installed |
| 4678 | ··package: | 4682 | ··package: |
| Offset 4684, 19 lines modified | Offset 4689, 14 lines modified | ||
| 4684 | ··-·PCI-DSSv4-1.2.1 | 4689 | ··-·PCI-DSSv4-1.2.1 |
| 4685 | ··-·enable_strategy | 4690 | ··-·enable_strategy |
| 4686 | ··-·low_complexity | 4691 | ··-·low_complexity |
| 4687 | ··-·low_disruption | 4692 | ··-·low_disruption |
| 4688 | ··-·medium_severity | 4693 | ··-·medium_severity |
| 4689 | ··-·no_reboot_needed | 4694 | ··-·no_reboot_needed |
| 4690 | ··-·package_firewalld_installed | 4695 | ··-·package_firewalld_installed |
| 4691 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4692 | [[packages]] | ||
| 4693 | name·=·"firewalld" | ||
| Max diff block lines reached; 11286/16885 bytes (66.84%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037cf0:·323 | 00037cf0:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 80 lines modified | Offset 15048, 80 lines modified | ||
| 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ace0:·656d·6564·6961·7469·6f6e·204 | 0003ace0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003acf0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad30:·646d·3133·3338·223e·3c74·6162·6c65·2063··dm1338"><table·c | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003adb0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003adc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a | 0003acf0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003ad00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ad10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad30:·7073·6522·2069·643d·2269·646d·3133·3338··pse"·id="idm1338 | |||
| 0003ad40:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad50:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad60:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ad70:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ad80:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad90:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ada0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003adb0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003adc0:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003add0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003ade0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003adf0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ae00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ae10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ae20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ae30:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003ae40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae70:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003ae80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003aea0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003aeb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003aec0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003aed0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003aee0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aef0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af00:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003af20:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a | 0003af30:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003af40:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003af50:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003af60:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003af70:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af80:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af90:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003afa0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003afb0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003afc0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003afd0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003afe0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003aff0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b000:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b010:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b020:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b030:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b040:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b050:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b060:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b070:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b080:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b090:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b0a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b0b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b0c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b0d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b0e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b0f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003ae20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae30:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003ae40:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003ae50:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003ae60:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003ae70:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003ae80:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003ae90:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003aea0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003aeb0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003aec0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003aed0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aee0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003aef0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003af00:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af10:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af20:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003af30:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003af40:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003af50:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003af60:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| Max diff block lines reached; 485012/495828 bytes (97.82%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:8 | 41 | ····*·cpe:/o:anolis:anolis_os:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 135, 19 lines modified | Offset 140, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 152 | include·install_aide |
| Offset 4856, 14 lines modified | Offset 4856, 19 lines modified | ||
| 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 4862 | ···························00227 | 4862 | ···························00227 |
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4864 | [[packages]] | ||
| 4865 | name·=·"rsyslog" | ||
| 4866 | version·=·"*" | ||
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4868 | -·name:·Ensure·rsyslog·is·installed | 4872 | -·name:·Ensure·rsyslog·is·installed |
| 4869 | ··package: | 4873 | ··package: |
| Offset 4874, 19 lines modified | Offset 4879, 14 lines modified | ||
| 4874 | ··-·NIST-800-53-CM-6(a) | 4879 | ··-·NIST-800-53-CM-6(a) |
| 4875 | ··-·enable_strategy | 4880 | ··-·enable_strategy |
| 4876 | ··-·low_complexity | 4881 | ··-·low_complexity |
| 4877 | ··-·low_disruption | 4882 | ··-·low_disruption |
| 4878 | ··-·medium_severity | 4883 | ··-·medium_severity |
| 4879 | ··-·no_reboot_needed | 4884 | ··-·no_reboot_needed |
| 4880 | ··-·package_rsyslog_installed | 4885 | ··-·package_rsyslog_installed |
| 4881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4882 | [[packages]] | ||
| 4883 | name·=·"rsyslog" | ||
| 4884 | version·=·"*" | ||
| 4885 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4886 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4887 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4888 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4889 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4890 | include·install_rsyslog | 4891 | include·install_rsyslog |
| Offset 4912, 14 lines modified | Offset 4912, 18 lines modified | ||
| 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4920 | [customizations.services] | ||
| 4921 | enabled·=·["rsyslog"] | ||
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4924 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 4927 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 4925 | ··block: | 4928 | ··block: |
| Offset 4942, 18 lines modified | Offset 4946, 14 lines modified | ||
| 4942 | ··-·NIST-800-53-CM-6(a) | 4946 | ··-·NIST-800-53-CM-6(a) |
| 4943 | ··-·enable_strategy | 4947 | ··-·enable_strategy |
| 4944 | ··-·low_complexity | 4948 | ··-·low_complexity |
| 4945 | ··-·low_disruption | 4949 | ··-·low_disruption |
| 4946 | ··-·medium_severity | 4950 | ··-·medium_severity |
| 4947 | ··-·no_reboot_needed | 4951 | ··-·no_reboot_needed |
| 4948 | ··-·service_rsyslog_enabled | 4952 | ··-·service_rsyslog_enabled |
| 4949 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4950 | [customizations.services] | ||
| 4951 | enabled·=·["rsyslog"] | ||
| 4952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 34863/40807 bytes (85.43%) of diff not shown. | |||
| Offset 14565, 15 lines modified | Offset 14565, 15 lines modified | ||
| 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038eb0:·3230·323 | 00038eb0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15321, 236 lines modified | Offset 15321, 236 lines modified | ||
| 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bdf0:·656d·6564·6961·7469·6f6e·204 | 0003bdf0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003be00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003be10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003be20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003be30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003be40:·7073·6522·2069·643d·2269·646d·3830·3032··pse"·id="idm8002 | |||
| 0003be00:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003be10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003be20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003be30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003be40:·646d·3830·3032·223e·3c74·6162·6c65·2063··dm8002"><table·c | |||
| 0003be50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003be60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003be70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003be80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003be90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bea0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003beb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bec0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bed0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bee0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bef0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bf00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bf10:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bf20:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bf30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bf40:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003bf50:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003bf60:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003bf70:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003bf80:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003bf90:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003bfa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003bfb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003bfc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003bfd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003bfe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003bff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c000:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c010:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c020:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c030:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c040:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c050:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c060:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c070:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c080:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003c090:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003c0a0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003c0b0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003c0c0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003c0d0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003c0e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003c0f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c100:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c110:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c120:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c130:·6765·743d·2223·6964·6d38·3030·3322·2074··get="#idm8003"·t | |||
| 0003c140:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c150:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c160:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c170:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c180:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c190:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c1a0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c1b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c1c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c1d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c1e0:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c1f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c200:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c210:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c220:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c230:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c240:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c250:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c260:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c280:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c290:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c2a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c2b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c2c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003 | 0003be50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003be60:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003be70:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003be80:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003c2e0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003c2f0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003c300:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c310:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c320:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c330:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c340:·6765·743d·2223·6964·6d38·3030·3422·2074··get="#idm8004"·t | |||
| 0003c350:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c360:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c370:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c380:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c390:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c3a0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c3b0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c3c0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c3d0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c3e0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| Max diff block lines reached; 3947085/3979431 bytes (99.19%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 87 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 88 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 88 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 131, 14 lines modified | Offset 131, 33 lines modified | ||
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 134 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ············_\x8c_\x8i_\x8s············5.3.1 | 135 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·--add=aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Ensure·aide·is·installed | 159 | -·name:·Ensure·aide·is·installed |
| 144 | ··package: | 160 | ··package: |
| Offset 153, 26 lines modified | Offset 172, 14 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 174 | ··-·low_complexity |
| 156 | ··-·low_disruption | 175 | ··-·low_disruption |
| 157 | ··-·medium_severity | 176 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·install·aide | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 184 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 185 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 192, 21 lines modified | Offset 199, 14 lines modified | ||
| 192 | include·install_aide | 199 | include·install_aide |
| 193 | class·install_aide·{ | 200 | class·install_aide·{ |
| 194 | ··package·{·'aide': | 201 | ··package·{·'aide': |
| 195 | ····ensure·=>·'installed', | 202 | ····ensure·=>·'installed', |
| 196 | ··} | 203 | ··} |
| 197 | } | 204 | } |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | package·--add=aide | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 209 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 210 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 358, 92 lines modified | Offset 358, 92 lines modified | ||
| 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 359 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 359 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 360 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 360 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 361 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 361 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 362 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 362 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 363 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 363 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 364 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 364 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | logvol·/home·1024 | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | [[customizations.filesystem]] | 366 | [[customizations.filesystem]] |
| 369 | mountpoint·=·"/home" | 367 | mountpoint·=·"/home" |
| 370 | size·=·1073741824 | 368 | size·=·1073741824 |
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 376 | part·/home | 374 | part·/home |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | logvol·/home·1024 | ||
| 377 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 377 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 378 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. | 378 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. |
| 379 | Rationale:··The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. | 379 | Rationale:··The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. |
| Max diff block lines reached; 248325/254376 bytes (97.62%) of diff not shown. | |||
| Offset 14564, 15 lines modified | Offset 14564, 15 lines modified | ||
| 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ea0:·3230·323 | 00038ea0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15326, 236 lines modified | Offset 15326, 236 lines modified | ||
| 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | ||
| 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003be50:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003be60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003be70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003be80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003be90:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003be50:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003be60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003be70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003be80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003be90:·3d22·6964·6d38·3030·3222·3e3c·7461·626c··="idm8002"><tabl | |||
| 0003bea0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003beb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bec0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bed0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bee0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bef0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bf00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bf10:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bf20:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bf30:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bf40:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bf50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bf60:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bf70:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bf80:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bf90:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003bfa0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003bfb0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003bfc0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003bfd0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003bfe0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003bff0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003c000:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003c010:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003c020:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003c030:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003c040:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c050:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c060:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c070:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c080:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c090:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c0a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c0b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c0c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c0d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c0e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c0f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c100:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c110:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c120:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c130:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c140:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c150:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c160:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c170:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c180:·7461·7267·6574·3d22·2369·646d·3830·3033··target="#idm8003 | |||
| 0003c190:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c1a0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c1b0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c1c0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c1d0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c1e0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c1f0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003c200:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c210:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c220:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c230:·646d·3830·3033·223e·3c74·6162·6c65·2063··dm8003"><table·c | |||
| 0003c240:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c250:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c260:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c270:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c280:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c290:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c2a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c2b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c2c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c2d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c2e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c2f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c300:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c310:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003 | 0003bea0:·3030·3222·3e3c·7072·653e·3c63·6f64·653e··002"><pre><code> | ||
| 0003beb0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003bec0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003bed0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003c330:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003c340:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003c350:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c360:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c370:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c380:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c390:·7461·7267·6574·3d22·2369·646d·3830·3034··target="#idm8004 | |||
| 0003c3a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c3b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c3c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c3d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c3e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c3f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003c410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003c420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| Max diff block lines reached; 4039381/4071727 bytes (99.21%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 132, 14 lines modified | Offset 132, 33 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=aide | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 160 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 161 | ··package: |
| Offset 154, 26 lines modified | Offset 173, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 175 | ··-·low_complexity |
| 157 | ··-·low_disruption | 176 | ··-·low_disruption |
| 158 | ··-·medium_severity | 177 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 185 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 200, 14 lines modified | ||
| 193 | include·install_aide | 200 | include·install_aide |
| 194 | class·install_aide·{ | 201 | class·install_aide·{ |
| 195 | ··package·{·'aide': | 202 | ··package·{·'aide': |
| 196 | ····ensure·=>·'installed', | 203 | ····ensure·=>·'installed', |
| 197 | ··} | 204 | ··} |
| 198 | } | 205 | } |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 204 | package·--add=aide | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 210 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 211 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 212 | $·sudo·/usr/sbin/aide·--check |
| Offset 836, 92 lines modified | Offset 836, 92 lines modified | ||
| 836 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 836 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 837 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 837 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 838 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 838 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 839 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 839 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 840 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 840 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 841 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 841 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 842 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 842 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 843 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 844 | logvol·/home·1024 | ||
| 845 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 843 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 846 | [[customizations.filesystem]] | 844 | [[customizations.filesystem]] |
| 847 | mountpoint·=·"/home" | 845 | mountpoint·=·"/home" |
| 848 | size·=·1073741824 | 846 | size·=·1073741824 |
| 849 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 850 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 848 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 851 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 849 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 852 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 850 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 853 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 851 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 854 | part·/home | 852 | part·/home |
| 853 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 854 | logvol·/home·1024 | ||
| 855 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 855 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 856 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. | 856 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. |
| 857 | Rationale:··The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. | 857 | Rationale:··The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. |
| Max diff block lines reached; 257442/263448 bytes (97.72%) of diff not shown. | |||
| Offset 14566, 15 lines modified | Offset 14566, 15 lines modified | ||
| 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ec0:·3230·323 | 00038ec0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15317, 235 lines modified | Offset 15317, 235 lines modified | ||
| 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003bdb0:·6469·6174·696f·6e20·4 | 0003bdb0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003bdc0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003bdd0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bde0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bdf0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003be00:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003bdc0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bdd0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bde0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bdf0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003be00:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003be10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003be20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003be30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003be40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003be50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003be60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003be70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003be80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003be90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bea0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003beb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bec0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bed0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bee0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bef0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bf00:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bf10:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bf20:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bf30:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bf40:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bf50:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003bf60:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003bf70:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003bf80:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003bf90:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003bfa0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003bfb0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bfc0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bfd0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bfe0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bff0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c000:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c010:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c020:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c030:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c040:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c050:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c060:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c070:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c080:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c090:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c0a0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c0b0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c0c0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c0d0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c0e0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c0f0:·3d22·2369·646d·3830·3033·2220·7461·6269··="#idm8003"·tabi | |||
| 0003c100:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c110:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c120:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c130:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c140:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c150:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003c160:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003c170:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c180:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c190:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c1a0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c1b0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c1c0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c1d0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c1e0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c1f0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c200:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c210:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c220:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c230:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c240:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c250:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c260:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c270:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c280:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003 | 0003be10:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | ||
| 0003be20:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003be30:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003c2a0:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003c2b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c2c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c2d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c2e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c2f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c300:·3d22·2369·646d·3830·3034·2220·7461·6269··="#idm8004"·tabi | |||
| 0003c310:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c320:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c330:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c340:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c350:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c360:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003c370:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003c380:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c390:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c3a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c3b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| Max diff block lines reached; 2544562/2576770 bytes (98.75%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 147, 14 lines modified | Offset 147, 33 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | package·--add=aide | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Ensure·aide·is·installed | 175 | -·name:·Ensure·aide·is·installed |
| 160 | ··package: | 176 | ··package: |
| Offset 169, 26 lines modified | Offset 188, 14 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 190 | ··-·low_complexity |
| 172 | ··-·low_disruption | 191 | ··-·low_disruption |
| 173 | ··-·medium_severity | 192 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | [[packages]] | ||
| 184 | name·=·"aide" | ||
| 185 | version·=·"*" | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | #·Remediation·is·applicable·only·in·certain·platforms | 200 | #·Remediation·is·applicable·only·in·certain·platforms |
| 192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 201 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 208, 21 lines modified | Offset 215, 14 lines modified | ||
| 208 | include·install_aide | 215 | include·install_aide |
| 209 | class·install_aide·{ | 216 | class·install_aide·{ |
| 210 | ··package·{·'aide': | 217 | ··package·{·'aide': |
| 211 | ····ensure·=>·'installed', | 218 | ····ensure·=>·'installed', |
| 212 | ··} | 219 | ··} |
| 213 | } | 220 | } |
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 219 | package·--add=aide | ||
| 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 221 | Run·the·following·command·to·generate·a·new·database: | 222 | Run·the·following·command·to·generate·a·new·database: |
| 222 | $·sudo·/usr/sbin/aide·--init | 223 | $·sudo·/usr/sbin/aide·--init |
| 223 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 224 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 224 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 225 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 225 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 226 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 226 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 227 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 400, 102 lines modified | Offset 400, 102 lines modified | ||
| 400 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 400 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 401 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 401 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 402 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 402 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 403 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 403 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 404 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 404 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 405 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 405 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 406 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 406 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 408 | logvol·/home·1024 | ||
| 409 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 410 | [[customizations.filesystem]] | 408 | [[customizations.filesystem]] |
| 411 | mountpoint·=·"/home" | 409 | mountpoint·=·"/home" |
| 412 | size·=·1073741824 | 410 | size·=·1073741824 |
| 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 414 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 412 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 415 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 413 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 416 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 414 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 417 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 415 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 418 | part·/home | 416 | part·/home |
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 418 | logvol·/home·1024 | ||
| 419 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 419 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 420 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. | 420 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. |
| 421 | ············The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging | 421 | ············The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging |
| Max diff block lines reached; 172563/178439 bytes (96.71%) of diff not shown. | |||
| Offset 14564, 16 lines modified | Offset 14564, 16 lines modified | ||
| 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038ea0:·2020·2020·2028·6173·206f·6620·3230·323 | 00038ea0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038eb0:·2d31·3 | 00038eb0:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 14984, 217 lines modified | Offset 14984, 217 lines modified | ||
| 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | ||
| 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a8e0:·6961·7469·6f6e·204 | 0003a8e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003a8f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003a900:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a910:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a920:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a930:·2069·643d·2269·646d·3133·3231·3822·3e3c···id="idm13218">< | |||
| 0003a940:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003a950:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003a8f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a900:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a910:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a920:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003a930:·3231·3822·3e3c·7461·626c·6520·636c·6173··218"><table·clas | |||
| 0003a940:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a950:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a960:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a970:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a980:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a990:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a9a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a9b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003a9c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a9d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a9e0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a9f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003aa00:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003aa10:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003aa20:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003aa30:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 0003aa40:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 0003aa50:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003aa60:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 0003aa70:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 0003aa80:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 0003aa90:·6167·733a·0a20·202d·2065·6e61·626c·655f··ags:.··-·enable_ | |||
| 0003aaa0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003aab0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003aac0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003aad0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003aae0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003aaf0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003a | 0003a960:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | ||
| 0003a970:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003a980:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a990:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a9a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ab10:·635f·696e·7374·616c·6c65·640a·3c2f·636f··c_installed.</co | |||
| 0003ab20:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ab30:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ab40:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ab50:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ab60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ab70:·646d·3133·3231·3922·2074·6162·696e·6465··dm13219"·tabinde | |||
| 0003ab80:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ab90:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aba0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003abb0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003abc0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003abd0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003abe0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003abf0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a | 0003a9b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003ac10:·2220·6964·3d22·6964·6d31·3332·3139·223e··"·id="idm13219"> | |||
| 0003ac20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ac30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ac40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ac50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ac60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ac70:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ac80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a | 0003a9c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003a9d0:·6964·6d31·3332·3139·2220·7461·6269·6e64··idm13219"·tabind | |||
| 0003a9e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003a9f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003aa00:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003aa10:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003aa20:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003aa30:·5265·6d65·6469·6174·696f·6e20·416e·6163··Remediation·Anac | |||
| 0003aa40:·6f6e·6461·2073·6e69·7070·6574·20e2·87b2··onda·snippet·... | |||
| 0003aa50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aa60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aa70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aa80:·2269·646d·3133·3231·3922·3e3c·7461·626c··"idm13219"><tabl | |||
| 0003aa90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aaa0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aab0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aac0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003aad0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a | 0003aae0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003a | 0003aaf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003ab00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003acc0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003acd0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ace0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003acf0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ad00:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ad10:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003ad20:·2069·6e73·7461·6c6c·2064·6e66·2d61·7574···install·dnf-aut | |||
| 0003ad30:·6f6d·6174·6963·0a3c·2f63·6f64·653e·3c2f··omatic.</code></ | |||
| 0003ad40:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad50:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ad60:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ad70:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| Max diff block lines reached; 369790/399652 bytes (92.53%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | $·sudo·yum·install·dnf-automatic | 111 | $·sudo·yum·install·dnf-automatic |
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=dnf-automatic | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·install·dnf-automatic | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·dnf-automatic·is·installed | 139 | -·name:·Ensure·dnf-automatic·is·installed |
| 124 | ··package: | 140 | ··package: |
| Offset 127, 26 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··tags: | 146 | ··tags: |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_dnf-automatic_installed | 152 | ··-·package_dnf-automatic_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·dnf-automatic | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"dnf-automatic" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 158 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 160, 21 lines modified | Offset 167, 14 lines modified | ||
| 160 | include·install_dnf-automatic | 167 | include·install_dnf-automatic |
| 161 | class·install_dnf-automatic·{ | 168 | class·install_dnf-automatic·{ |
| 162 | ··package·{·'dnf-automatic': | 169 | ··package·{·'dnf-automatic': |
| 163 | ····ensure·=>·'installed', | 170 | ····ensure·=>·'installed', |
| 164 | ··} | 171 | ··} |
| 165 | } | 172 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=dnf-automatic | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 174 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 174 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 175 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 175 | automatic.conf. | 176 | automatic.conf. |
| 176 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 177 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 177 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 178 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 178 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 179 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9491, 14 lines modified | Offset 9491, 28 lines modified | ||
| 9491 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9491 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9492 | ···························A.9.1.2 | 9492 | ···························A.9.1.2 |
| 9493 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9493 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9494 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9494 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9495 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9495 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9496 | ············_\x8c_\x8i_\x8s············2.2.3 | 9496 | ············_\x8c_\x8i_\x8s············2.2.3 |
| 9497 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9497 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9503 | package·--remove=dhcp-server | ||
| 9504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9509 | package·remove·dhcp-server | ||
| 9498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9503 | -·name:·Ensure·dhcp-server·is·removed | 9515 | -·name:·Ensure·dhcp-server·is·removed |
| 9504 | ··package: | 9516 | ··package: |
| Max diff block lines reached; 36108/41669 bytes (86.65%) of diff not shown. | |||
| Offset 14547, 16 lines modified | Offset 14547, 16 lines modified | ||
| 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038d90:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038d90:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038da0:·313 | 00038da0:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15367, 235 lines modified | Offset 15367, 235 lines modified | ||
| 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c0d0:·6961·7469·6f6e·204 | 0003c0d0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003c0e0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c0f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c100:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c110:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c120:·2069·643d·2269·646d·3830·3032·223e·3c70···id="idm8002"><p | |||
| 0003c0e0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c0f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c100:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c110:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c120:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003c130:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c140:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c150:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c160:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c170:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c180:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c190:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c1a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c1b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c1c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c1d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c1e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c1f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c200:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c210:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003c220:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c230:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c240:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c250:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c260:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c270:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003c280:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003c290:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003c2a0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003c2b0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003c2c0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003c2d0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c2e0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c2f0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c300:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c310:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c320:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c330:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c340:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c350:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c360:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c370:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c380:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c390:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c3a0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c3b0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c3c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c3d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c3e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c3f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c410:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c470:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003c480:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c490:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c4a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c4b0:·7365·2220·6964·3d22·6964·6d38·3030·3322··se"·id="idm8003" | |||
| 0003c4c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c4d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c4e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c4f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c500:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c510:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c520:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c530:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c540:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c550:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c560:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c570:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c580:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c590:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c5a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c | 0003c130:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 0003c140:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003c150:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003c5c0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003c5d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c5e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c5f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c600:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c610:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c620:·2223·6964·6d38·3030·3422·2074·6162·696e··"#idm8004"·tabin | |||
| 0003c630:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c640:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c650:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c660:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c670:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c680:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003c690:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c6a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c6b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c6c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| Max diff block lines reached; 5577318/5609664 bytes (99.42%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 14 lines modified | Offset 138, 33 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·install·aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Ensure·aide·is·installed | 166 | -·name:·Ensure·aide·is·installed |
| 151 | ··package: | 167 | ··package: |
| Offset 160, 26 lines modified | Offset 179, 14 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 179 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 180 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 181 | ··-·low_complexity |
| 163 | ··-·low_disruption | 182 | ··-·low_disruption |
| 164 | ··-·medium_severity | 183 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·install·aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | 191 | #·Remediation·is·applicable·only·in·certain·platforms |
| 183 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 199, 21 lines modified | Offset 206, 14 lines modified | ||
| 199 | include·install_aide | 206 | include·install_aide |
| 200 | class·install_aide·{ | 207 | class·install_aide·{ |
| 201 | ··package·{·'aide': | 208 | ··package·{·'aide': |
| 202 | ····ensure·=>·'installed', | 209 | ····ensure·=>·'installed', |
| 203 | ··} | 210 | ··} |
| 204 | } | 211 | } |
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | package·--add=aide | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Run·the·following·command·to·generate·a·new·database: | 213 | Run·the·following·command·to·generate·a·new·database: |
| 213 | $·sudo·/usr/sbin/aide·--init | 214 | $·sudo·/usr/sbin/aide·--init |
| 214 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 215 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 216 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 216 | To·initiate·a·manual·check,·run·the·following·command: | 217 | To·initiate·a·manual·check,·run·the·following·command: |
| 217 | $·sudo·/usr/sbin/aide·--check | 218 | $·sudo·/usr/sbin/aide·--check |
| Offset 729, 14 lines modified | Offset 729, 33 lines modified | ||
| 729 | ··-·PCI-DSSv4-2.2.7 | 729 | ··-·PCI-DSSv4-2.2.7 |
| 730 | ··-·configure_crypto_policy | 730 | ··-·configure_crypto_policy |
| 731 | ··-·high_severity | 731 | ··-·high_severity |
| 732 | ··-·low_complexity | 732 | ··-·low_complexity |
| 733 | ··-·low_disruption | 733 | ··-·low_disruption |
| 734 | ··-·no_reboot_needed | 734 | ··-·no_reboot_needed |
| 735 | ··-·restrict_strategy | 735 | ··-·restrict_strategy |
| 736 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 737 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 738 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 739 | rc=$? | ||
| 740 | if·test·"$rc"·=·127;·then | ||
| 741 | » echo·"$stderr_of_call"·>&2 | ||
| 742 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 743 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 744 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 745 | » false··#·end·with·an·error·code | ||
| 746 | elif·test·"$rc"·!=·0;·then | ||
| 747 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 748 | » false··#·end·with·an·error·code | ||
| 749 | fi | ||
| 736 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 750 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 737 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 751 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 422834/428354 bytes (98.71%) of diff not shown. | |||
| Offset 14548, 15 lines modified | Offset 14548, 15 lines modified | ||
| 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038da0:·7320·6f66·2032·3032·3 | 00038da0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15336, 235 lines modified | Offset 15336, 235 lines modified | ||
| 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | ||
| 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bee0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bef0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bf00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bf10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bf20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bf30:·6964·6d38·3030·3222·3e3c·7072·653e·3c63··idm8002"><pre><c | |||
| 0003bee0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bef0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bf00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bf10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bf20:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003bf30:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bf40:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bf50:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bf60:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bf70:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bf80:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bf90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bfa0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bfb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bfc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bfd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bfe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bff0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c000:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c010:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c020:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c030:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c040:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c050:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c060:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c070:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c080:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c090:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c0a0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c0b0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c0c0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c0d0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c0e0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c0f0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c100:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c110:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c120:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c130:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c140:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c150:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c160:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c170:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c180:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c190:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c1a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c1b0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c1c0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c1d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c1e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c1f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c200:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c210:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c220:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003c230:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c240:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c250:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c260:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c270:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c280:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003c290:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c2a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c2b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c2c0:·643d·2269·646d·3830·3033·223e·3c74·6162··d="idm8003"><tab | |||
| 0003c2d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c2e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c2f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c300:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c310:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c320:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c330:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c340:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c350:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c360:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c370:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c380:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c390:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c3a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c3b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003 | 0003bf40:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | ||
| 0003bf50:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bf60:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003c3d0:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 0003c3e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c3f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c400:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c410:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c420:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c430:·3830·3034·2220·7461·6269·6e64·6578·3d22··8004"·tabindex=" | |||
| 0003c440:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c450:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c460:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c470:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c480:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c490:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003c4a0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003c4b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c4c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c4d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| Max diff block lines reached; 3397385/3429593 bytes (99.06%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 14 lines modified | Offset 133, 33 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·--add=aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 161 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 162 | ··package: |
| Offset 155, 26 lines modified | Offset 174, 14 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 174 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 175 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 176 | ··-·low_complexity |
| 158 | ··-·low_disruption | 177 | ··-·low_disruption |
| 159 | ··-·medium_severity | 178 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | package·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | 186 | #·Remediation·is·applicable·only·in·certain·platforms |
| 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 187 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 194, 21 lines modified | Offset 201, 14 lines modified | ||
| 194 | include·install_aide | 201 | include·install_aide |
| 195 | class·install_aide·{ | 202 | class·install_aide·{ |
| 196 | ··package·{·'aide': | 203 | ··package·{·'aide': |
| 197 | ····ensure·=>·'installed', | 204 | ····ensure·=>·'installed', |
| 198 | ··} | 205 | ··} |
| 199 | } | 206 | } |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | package·--add=aide | ||
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 208 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 210 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 211 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 211 | To·initiate·a·manual·check,·run·the·following·command: | 212 | To·initiate·a·manual·check,·run·the·following·command: |
| 212 | $·sudo·/usr/sbin/aide·--check | 213 | $·sudo·/usr/sbin/aide·--check |
| Offset 724, 14 lines modified | Offset 724, 33 lines modified | ||
| 724 | ··-·PCI-DSSv4-2.2.7 | 724 | ··-·PCI-DSSv4-2.2.7 |
| 725 | ··-·configure_crypto_policy | 725 | ··-·configure_crypto_policy |
| 726 | ··-·high_severity | 726 | ··-·high_severity |
| 727 | ··-·low_complexity | 727 | ··-·low_complexity |
| 728 | ··-·low_disruption | 728 | ··-·low_disruption |
| 729 | ··-·no_reboot_needed | 729 | ··-·no_reboot_needed |
| 730 | ··-·restrict_strategy | 730 | ··-·restrict_strategy |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 732 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 733 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 734 | rc=$? | ||
| 735 | if·test·"$rc"·=·127;·then | ||
| 736 | » echo·"$stderr_of_call"·>&2 | ||
| 737 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 738 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 739 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 740 | » false··#·end·with·an·error·code | ||
| 741 | elif·test·"$rc"·!=·0;·then | ||
| 742 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 743 | » false··#·end·with·an·error·code | ||
| 744 | fi | ||
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 745 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 746 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 285525/291045 bytes (98.10%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038dc0:·2d3 | 00038dc0:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15327, 235 lines modified | Offset 15327, 235 lines modified | ||
| 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003be50:·6469·6174·696f·6e20·4 | 0003be50:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003be60:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003be70:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003be80:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003be90:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bea0:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003be60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003be70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003be80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003be90:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bea0:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003beb0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bec0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bed0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bee0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bef0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bf00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bf10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003bf20:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003bf30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bf40:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bf50:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bf60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bf70:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bf80:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bf90:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bfa0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bfb0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bfc0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bfd0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bfe0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bff0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003c000:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003c010:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003c020:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003c030:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003c040:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003c050:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003c060:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003c070:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003c080:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c090:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c0a0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c0b0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c0c0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c0d0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c0e0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c0f0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c100:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c110:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c120:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c130:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c140:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c150:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c160:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c170:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c190:·3d22·2369·646d·3830·3033·2220·7461·6269··="#idm8003"·tabi | |||
| 0003c1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c1f0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003c200:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003c210:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c220:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c230:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c240:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c250:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c260:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c270:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c280:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c290:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c2a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c2b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c2c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c2d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c2e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c2f0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c300:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c310:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c320:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003 | 0003beb0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | ||
| 0003bec0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003bed0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003c340:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003c350:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c360:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c370:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c380:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c390:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c3a0:·3d22·2369·646d·3830·3034·2220·7461·6269··="#idm8004"·tabi | |||
| 0003c3b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c3c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c3d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c3e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c3f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c400:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003c410:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003c420:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c430:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c440:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| Max diff block lines reached; 3152768/3185114 bytes (98.98%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 132, 14 lines modified | Offset 132, 33 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=aide | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 160 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 161 | ··package: |
| Offset 154, 26 lines modified | Offset 173, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 175 | ··-·low_complexity |
| 157 | ··-·low_disruption | 176 | ··-·low_disruption |
| 158 | ··-·medium_severity | 177 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 185 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 200, 14 lines modified | ||
| 193 | include·install_aide | 200 | include·install_aide |
| 194 | class·install_aide·{ | 201 | class·install_aide·{ |
| 195 | ··package·{·'aide': | 202 | ··package·{·'aide': |
| 196 | ····ensure·=>·'installed', | 203 | ····ensure·=>·'installed', |
| 197 | ··} | 204 | ··} |
| 198 | } | 205 | } |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 204 | package·--add=aide | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 210 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 211 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 212 | $·sudo·/usr/sbin/aide·--check |
| Offset 723, 14 lines modified | Offset 723, 33 lines modified | ||
| 723 | ··-·PCI-DSSv4-2.2.7 | 723 | ··-·PCI-DSSv4-2.2.7 |
| 724 | ··-·configure_crypto_policy | 724 | ··-·configure_crypto_policy |
| 725 | ··-·high_severity | 725 | ··-·high_severity |
| 726 | ··-·low_complexity | 726 | ··-·low_complexity |
| 727 | ··-·low_disruption | 727 | ··-·low_disruption |
| 728 | ··-·no_reboot_needed | 728 | ··-·no_reboot_needed |
| 729 | ··-·restrict_strategy | 729 | ··-·restrict_strategy |
| 730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 731 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 732 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 733 | rc=$? | ||
| 734 | if·test·"$rc"·=·127;·then | ||
| 735 | » echo·"$stderr_of_call"·>&2 | ||
| 736 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 737 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 738 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 739 | » false··#·end·with·an·error·code | ||
| 740 | elif·test·"$rc"·!=·0;·then | ||
| 741 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 742 | » false··#·end·with·an·error·code | ||
| 743 | fi | ||
| 730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 744 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 731 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 745 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 265460/270980 bytes (97.96%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038dc0:·2d3 | 00038dc0:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15359, 235 lines modified | Offset 15359, 235 lines modified | ||
| 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c050:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c060:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c070:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c080:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c090:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c0a0:·646d·3830·3032·223e·3c70·7265·3e3c·636f··dm8002"><pre><co | |||
| 0003c050:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c060:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c070:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c080:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c090:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | |||
| 0003c0a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c0b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c0c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c0d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c0e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c0f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c100:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c110:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c120:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c130:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c140:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c160:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c170:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c180:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c190:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003c1a0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c1b0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c1c0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c1d0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c1e0:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003c1f0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003c200:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003c210:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003c220:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003c230:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003c240:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003c250:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c260:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c270:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c280:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c290:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c2a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c2b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c2c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c2d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c2e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c2f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c300:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c310:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c320:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c330:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c340:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c350:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c360:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c370:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c380:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c390:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c3a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c3b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c3c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c3d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c3e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c3f0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003c400:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c410:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c420:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c430:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c440:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c450:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c460:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c470:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c480:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c490:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c4a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c4b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c4c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c4d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c4e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c4f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c500:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c510:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c520:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c | 0003c0b0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | ||
| 0003c0c0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003c0d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003c540:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003c550:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c560:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c570:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c580:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c590:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c5a0:·3030·3422·2074·6162·696e·6465·783d·2230··004"·tabindex="0 | |||
| 0003c5b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c5c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c5d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c5e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c5f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c600:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003c610:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c620:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c630:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| Max diff block lines reached; 5436231/5468577 bytes (99.41%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 137, 14 lines modified | Offset 137, 33 lines modified | ||
| 137 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 137 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 139 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 140 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 140 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 141 | ············_\x8c_\x8i_\x8s············5.3.1 | 141 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 143 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 143 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·install·aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | -·name:·Ensure·aide·is·installed | 165 | -·name:·Ensure·aide·is·installed |
| 150 | ··package: | 166 | ··package: |
| Offset 159, 26 lines modified | Offset 178, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 178 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 180 | ··-·low_complexity |
| 162 | ··-·low_disruption | 181 | ··-·low_disruption |
| 163 | ··-·medium_severity | 182 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 184 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | 190 | #·Remediation·is·applicable·only·in·certain·platforms |
| 182 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 191 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 198, 21 lines modified | Offset 205, 14 lines modified | ||
| 198 | include·install_aide | 205 | include·install_aide |
| 199 | class·install_aide·{ | 206 | class·install_aide·{ |
| 200 | ··package·{·'aide': | 207 | ··package·{·'aide': |
| 201 | ····ensure·=>·'installed', | 208 | ····ensure·=>·'installed', |
| 202 | ··} | 209 | ··} |
| 203 | } | 210 | } |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | package·--add=aide | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 212 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 213 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 214 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 215 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 215 | To·initiate·a·manual·check,·run·the·following·command: | 216 | To·initiate·a·manual·check,·run·the·following·command: |
| 216 | $·sudo·/usr/sbin/aide·--check | 217 | $·sudo·/usr/sbin/aide·--check |
| Offset 728, 14 lines modified | Offset 728, 33 lines modified | ||
| 728 | ··-·PCI-DSSv4-2.2.7 | 728 | ··-·PCI-DSSv4-2.2.7 |
| 729 | ··-·configure_crypto_policy | 729 | ··-·configure_crypto_policy |
| 730 | ··-·high_severity | 730 | ··-·high_severity |
| 731 | ··-·low_complexity | 731 | ··-·low_complexity |
| 732 | ··-·low_disruption | 732 | ··-·low_disruption |
| 733 | ··-·no_reboot_needed | 733 | ··-·no_reboot_needed |
| 734 | ··-·restrict_strategy | 734 | ··-·restrict_strategy |
| 735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 736 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 737 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 738 | rc=$? | ||
| 739 | if·test·"$rc"·=·127;·then | ||
| 740 | » echo·"$stderr_of_call"·>&2 | ||
| 741 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 742 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 743 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 744 | » false··#·end·with·an·error·code | ||
| 745 | elif·test·"$rc"·!=·0;·then | ||
| 746 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 747 | » false··#·end·with·an·error·code | ||
| 748 | fi | ||
| 735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 749 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 736 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 750 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 408573/414093 bytes (98.67%) of diff not shown. | |||
| Offset 14583, 15 lines modified | Offset 14583, 15 lines modified | ||
| 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038fd0:·3 | 00038fd0:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | ||
| 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c040:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c050:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c060:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c070:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c080:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c090:·2269·646d·3830·3032·223e·3c70·7265·3e3c··"idm8002"><pre>< | |||
| 0003c040:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c050:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c060:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c070:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c080:·6522·2069·643d·2269·646d·3830·3032·223e··e"·id="idm8002"> | |||
| 0003c090:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c0a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c0b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c0c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c0d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c0e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c0f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c100:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c110:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c120:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c130:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c140:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c150:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c160:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c170:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c180:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c190:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003c1a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003c1b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003c1c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003c1d0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003c1e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003c1f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003c200:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003c210:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003c220:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003c230:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003c240:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c250:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c260:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c270:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c280:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c290:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c2a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c2b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c2c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c2d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c2e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c2f0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c300:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c310:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c320:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003c330:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c340:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c350:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c360:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c370:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c380:·6d38·3030·3322·2074·6162·696e·6465·783d··m8003"·tabindex= | |||
| 0003c390:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c3a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c3b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c3c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c3d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c3e0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003c3f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c400:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c410:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c420:·6964·3d22·6964·6d38·3030·3322·3e3c·7461··id="idm8003"><ta | |||
| 0003c430:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c440:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c450:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c460:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c470:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c480:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c490:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c4a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c4b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c4c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c4d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c4f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c500:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c510:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c | 0003c0a0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | ||
| 0003c0b0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c0c0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c530:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 0003c540:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c550:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c560:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c570:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c580:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c590:·6d38·3030·3422·2074·6162·696e·6465·783d··m8004"·tabindex= | |||
| 0003c5a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c5b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c5c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c5d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c5e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c5f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003c600:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003c610:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c620:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c630:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| Max diff block lines reached; 4682876/4715084 bytes (99.32%) of diff not shown. | |||
| Offset 79, 15 lines modified | Offset 79, 15 lines modified | ||
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 82 | ····*·cpe:/o:redhat:enterprise_linux:8 | 82 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 83 | ····*·cpe:/o:centos:centos:8 | 83 | ····*·cpe:/o:centos:centos:8 |
| 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 138, 14 lines modified | Offset 138, 33 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·install·aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Ensure·aide·is·installed | 166 | -·name:·Ensure·aide·is·installed |
| 151 | ··package: | 167 | ··package: |
| Offset 160, 26 lines modified | Offset 179, 14 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 179 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 180 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 181 | ··-·low_complexity |
| 163 | ··-·low_disruption | 182 | ··-·low_disruption |
| 164 | ··-·medium_severity | 183 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·install·aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | 191 | #·Remediation·is·applicable·only·in·certain·platforms |
| 183 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 199, 21 lines modified | Offset 206, 14 lines modified | ||
| 199 | include·install_aide | 206 | include·install_aide |
| 200 | class·install_aide·{ | 207 | class·install_aide·{ |
| 201 | ··package·{·'aide': | 208 | ··package·{·'aide': |
| 202 | ····ensure·=>·'installed', | 209 | ····ensure·=>·'installed', |
| 203 | ··} | 210 | ··} |
| 204 | } | 211 | } |
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | package·--add=aide | ||
| 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 212 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 213 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 214 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 215 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 330, 14 lines modified | Offset 330, 18 lines modified | ||
| 330 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 330 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 331 | ············_\x8i_\x8s_\x8m······1446 | 331 | ············_\x8i_\x8s_\x8m······1446 |
| 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 333 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 333 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 334 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 334 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 336 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 336 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 338 | [customizations] | ||
| 339 | fips·=·true | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 345 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 343 | ··set_fact: | 346 | ··set_fact: |
| Offset 437, 18 lines modified | Offset 441, 14 lines modified | ||
| 437 | ··-·NIST-800-53-SC-13 | 441 | ··-·NIST-800-53-SC-13 |
| 438 | ··-·enable_fips_mode | 442 | ··-·enable_fips_mode |
| 439 | ··-·high_severity | 443 | ··-·high_severity |
| 440 | ··-·medium_complexity | 444 | ··-·medium_complexity |
| 441 | ··-·medium_disruption | 445 | ··-·medium_disruption |
| 442 | ··-·reboot_required | 446 | ··-·reboot_required |
| 443 | ··-·restrict_strategy | 447 | ··-·restrict_strategy |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 475598/481947 bytes (98.68%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2028·6173·206f·6620·3230·323 | 00038db0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00038dc0:·3 | 00038dc0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17534, 130 lines modified | Offset 17534, 130 lines modified | ||
| 000447d0:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | 000447d0:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | ||
| 000447e0:·3538·2220·7461·6269·6e64·6578·3d22·3022··58"·tabindex="0" | 000447e0:·3538·2220·7461·6269·6e64·6578·3d22·3022··58"·tabindex="0" | ||
| 000447f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 000447f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00044800:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00044800:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00044810:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00044810:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00044820:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00044820:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00044830:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00044830:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00044840:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 00044850:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00044860:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00044870:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00044880:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00044890:·3837·3538·223e·3c74·6162·6c65·2063·6c61··8758"><table·cla | |||
| 000448a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000448b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000448c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000448d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000448e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000448f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00044900:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00044 | 00044840:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 00044850:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00044860:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00044870:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00044880:·6522·2069·643d·2269·646d·3837·3538·223e··e"·id="idm8758"> | |||
| 00044890:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 000448a0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 000448b0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 000448c0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 000448d0:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 000448e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 000448f0:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 00044900:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | |||
| 00044910:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 00044920:·4c54·3a4e·4f2d·5348·4131·3c2f·6162·6272··LT:NO-SHA1</abbr | |||
| 00044930:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 00044940:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 00044950:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 00044960:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 00044970:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 00044980:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 00044990:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 000449a0:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 000449b0:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 000449c0:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 000449d0:·6c6c·2220·2667·743b·2661·6d70·3b32·0a09··ll"·>&2.. | |||
| 000449e0:·6563·686f·2022·4d61·6b65·2073·7572·6520··echo·"Make·sure· | |||
| 000449f0:·7468·6174·2074·6865·2073·6372·6970·7420··that·the·script· | |||
| 00044a00:·6973·2069·6e73·7461·6c6c·6564·206f·6e20··is·installed·on· | |||
| 00044a10:·7468·6520·7265·6d65·6469·6174·6564·2073··the·remediated·s | |||
| 00044a20:·7973·7465·6d2e·2220·2667·743b·2661·6d70··ystem."·>& | |||
| 00044a30:·3b32·0a09·6563·686f·2022·5365·6520·6f75··;2..echo·"See·ou | |||
| 00044a40:·7470·7574·206f·6620·7468·6520·2764·6e66··tput·of·the·'dnf | |||
| 00044a50:·2070·726f·7669·6465·7320·7570·6461·7465···provides·update | |||
| 00044a60:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 00044a70:·2720·636f·6d6d·616e·6422·2026·6774·3b26··'·command"·>& | |||
| 00044a80:·616d·703b·320a·0965·6368·6f20·2274·6f20··amp;2..echo·"to· | |||
| 00044a90:·7365·6520·7768·6174·2070·6163·6b61·6765··see·what·package | |||
| 00044aa0:·2074·6f20·2872·6529·696e·7374·616c·6c22···to·(re)install" | |||
| 00044ab0:·2026·6774·3b26·616d·703b·320a·0a09·6661···>&2...fa | |||
| 00044ac0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 00044ad0:·616e·2065·7272·6f72·2063·6f64·650a·656c··an·error·code.el | |||
| 00044ae0:·6966·2074·6573·7420·2224·7263·2220·213d··if·test·"$rc"·!= | |||
| 00044af0:·2030·3b20·7468·656e·0a09·6563·686f·2022···0;·then..echo·" | |||
| 00044b00:·4572·726f·7220·696e·766f·6b69·6e67·2074··Error·invoking·t | |||
| 00044b10:·6865·2075·7064·6174·652d·6372·7970·746f··he·update-crypto | |||
| 00044b20:·2d70·6f6c·6963·6965·7320·7363·7269·7074··-policies·script | |||
| 00044b30:·3a20·2473·7464·6572·725f·6f66·5f63·616c··:·$stderr_of_cal | |||
| 00044b40:·6c22·2026·6774·3b26·616d·703b·320a·0966··l"·>&2..f | |||
| 00044b50:·616c·7365·2020·2320·656e·6420·7769·7468··alse··#·end·with | |||
| 00044b60:·2061·6e20·6572·726f·7220·636f·6465·0a66···an·error·code.f | |||
| 00044b70:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 00044b80:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00044b90:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00044ba0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00044bb0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00044bc0:·6574·3d22·2369·646d·3837·3630·2220·7461··et="#idm8760"·ta | |||
| 00044bd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00044be0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00044bf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00044c00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00044c10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00044c20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00044c30:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 00044c40:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00044c50:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00044c60:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00044c70:·6522·2069·643d·2269·646d·3837·3630·223e··e"·id="idm8760"> | |||
| 00044c80:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00044c90:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00044ca0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00044cb0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00044cc0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00044cd0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00044ce0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00044cf0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00044d00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00044d10:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00044d20:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 00044 | 00044d30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00044d40:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00044d50:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 00044d60:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00044d70:·7265·3e3c·636f·6465·3e2d·2d2d·0a61·7069··re><code>---.api | |||
| 00044d80:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 00044d90:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 00044da0:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 00044db0:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 00044dc0:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 00044dd0:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| Max diff block lines reached; 2014492/2032348 bytes (99.12%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 636, 14 lines modified | Offset 636, 33 lines modified | ||
| 636 | ··-·PCI-DSSv4-2.2.7 | 636 | ··-·PCI-DSSv4-2.2.7 |
| 637 | ··-·configure_crypto_policy | 637 | ··-·configure_crypto_policy |
| 638 | ··-·high_severity | 638 | ··-·high_severity |
| 639 | ··-·low_complexity | 639 | ··-·low_complexity |
| 640 | ··-·low_disruption | 640 | ··-·low_disruption |
| 641 | ··-·no_reboot_needed | 641 | ··-·no_reboot_needed |
| 642 | ··-·restrict_strategy | 642 | ··-·restrict_strategy |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 644 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 645 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 646 | rc=$? | ||
| 647 | if·test·"$rc"·=·127;·then | ||
| 648 | » echo·"$stderr_of_call"·>&2 | ||
| 649 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 650 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 651 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 652 | » false··#·end·with·an·error·code | ||
| 653 | elif·test·"$rc"·!=·0;·then | ||
| 654 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 655 | » false··#·end·with·an·error·code | ||
| 656 | fi | ||
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 648 | --- | 662 | --- |
| 649 | apiVersion:·machineconfiguration.openshift.io/v1 | 663 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 661, 33 lines modified | Offset 680, 14 lines modified | ||
| 661 | ············Before=kubelet.service | 680 | ············Before=kubelet.service |
| 662 | ············[Service] | 681 | ············[Service] |
| 663 | ············Type=oneshot | 682 | ············Type=oneshot |
| 664 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 683 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 665 | ············RemainAfterExit=yes | 684 | ············RemainAfterExit=yes |
| 666 | ············[Install] | 685 | ············[Install] |
| 667 | ············WantedBy=multi-user.target | 686 | ············WantedBy=multi-user.target |
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 669 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 670 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 671 | rc=$? | ||
| 672 | if·test·"$rc"·=·127;·then | ||
| 673 | » echo·"$stderr_of_call"·>&2 | ||
| 674 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 675 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 676 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 677 | » false··#·end·with·an·error·code | ||
| 678 | elif·test·"$rc"·!=·0;·then | ||
| 679 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 680 | » false··#·end·with·an·error·code | ||
| 681 | fi | ||
| 682 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 687 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 683 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 688 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 684 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 689 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 685 | Severity: ··medium | 690 | Severity: ··medium |
| 686 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 691 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 687 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 692 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 688 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 693 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1021, 14 lines modified | Offset 1021, 33 lines modified | ||
| 1021 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 1021 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 1022 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1022 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1023 | The·rear·package·can·be·installed·with·the·following·command: | 1023 | The·rear·package·can·be·installed·with·the·following·command: |
| 1024 | $·sudo·yum·install·rear | 1024 | $·sudo·yum·install·rear |
| 1025 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1025 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1026 | Severity: ·medium | 1026 | Severity: ·medium |
| 1027 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 1027 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1028 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1029 | [[packages]] | ||
| 1030 | name·=·"rear" | ||
| 1031 | version·=·"*" | ||
| 1032 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1033 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1034 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1035 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1036 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1037 | package·--add=rear | ||
| 1038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1043 | package·install·rear | ||
| 1028 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1029 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1030 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1031 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1032 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1033 | -·name:·Ensure·rear·is·installed | 1049 | -·name:·Ensure·rear·is·installed |
| 1034 | ··package: | 1050 | ··package: |
| Offset 1042, 26 lines modified | Offset 1061, 14 lines modified | ||
| 1042 | ··tags: | 1061 | ··tags: |
| 1043 | ··-·enable_strategy | 1062 | ··-·enable_strategy |
| 1044 | ··-·low_complexity | 1063 | ··-·low_complexity |
| 1045 | ··-·low_disruption | 1064 | ··-·low_disruption |
| 1046 | ··-·medium_severity | 1065 | ··-·medium_severity |
| 1047 | ··-·no_reboot_needed | 1066 | ··-·no_reboot_needed |
| 1048 | ··-·package_rear_installed | 1067 | ··-·package_rear_installed |
| 1049 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1050 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 164651/170936 bytes (96.32%) of diff not shown. | |||
| Offset 14569, 15 lines modified | Offset 14569, 15 lines modified | ||
| 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038ef0:·206f·6620·3230·323 | 00038ef0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16947, 130 lines modified | Offset 16947, 130 lines modified | ||
| 00042320:·7461·7267·6574·3d22·2369·646d·3837·3538··target="#idm8758 | 00042320:·7461·7267·6574·3d22·2369·646d·3837·3538··target="#idm8758 | ||
| 00042330:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00042330:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00042340:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00042340:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00042350:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00042350:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00042360:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00042360:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00042370:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00042370:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00042380:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00042380:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00042390:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 000423a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 000423b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000423c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000423d0:·6c61·7073·6522·2069·643d·2269·646d·3837··lapse"·id="idm87 | |||
| 000423e0:·3538·223e·3c74·6162·6c65·2063·6c61·7373··58"><table·class | |||
| 000423f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00042400:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00042410:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00042420:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00042430:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00042440:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00042450:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00042460:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00042470:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00042480:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00042490:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 000424a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000424b0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 000424c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 000424d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·2d2d··e><pre><code>--- | |||
| 000424e0:·0a61·7069·5665·7273·696f·6e3a·206d·6163··.apiVersion:·mac | |||
| 000424f0:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | |||
| 00042500:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | |||
| 00042510:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | |||
| 00042520:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | |||
| 00042530:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | |||
| 00042540:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | |||
| 00042550:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | |||
| 00042560:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | |||
| 00042570:·733a·0a20·2020·2020·2020·202d·206e·616d··s:.········-·nam | |||
| 00042580:·653a·2063·6f6e·6669·6775·7265·2d63·7279··e:·configure-cry | |||
| 00042590:·7074·6f2d·706f·6c69·6379·2e73·6572·7669··pto-policy.servi | |||
| 000425a0:·6365·0a20·2020·2020·2020·2020·2065·6e61··ce.··········ena | |||
| 000425b0:·626c·6564·3a20·7472·7565·0a20·2020·2020··bled:·true.····· | |||
| 000425c0:·2020·2020·2063·6f6e·7465·6e74·733a·207c·······contents:·| | |||
| 000425d0:·0a20·2020·2020·2020·2020·2020·205b·556e··.············[Un | |||
| 000425e0:·6974·5d0a·2020·2020·2020·2020·2020·2020··it].············ | |||
| 000425f0:·4265·666f·7265·3d6b·7562·656c·6574·2e73··Before=kubelet.s | |||
| 00042600:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00042610:·2020·205b·5365·7276·6963·655d·0a20·2020·····[Service].··· | |||
| 00042620:·2020·2020·2020·2020·2054·7970·653d·6f6e···········Type=on | |||
| 00042630:·6573·686f·740a·2020·2020·2020·2020·2020··eshot.·········· | |||
| 00042640:·2020·4578·6563·5374·6172·743d·7570·6461····ExecStart=upda | |||
| 00042650:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 00042660:·6573·202d·2d73·6574·207b·7b2e·7661·725f··es·--set·{{.var_ | |||
| 00042670:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00042680:·6c69·6379·7d7d·0a20·2020·2020·2020·2020··licy}}.········· | |||
| 00042690:·2020·2052·656d·6169·6e41·6674·6572·4578·····RemainAfterEx | |||
| 000426a0:·6974·3d79·6573·0a20·2020·2020·2020·2020··it=yes.········· | |||
| 000426b0:·2020·205b·496e·7374·616c·6c5d·0a20·2020·····[Install].··· | |||
| 000426c0:·2020·2020·2020·2020·2057·616e·7465·6442···········WantedB | |||
| 000426d0:·793d·6d75·6c74·692d·7573·6572·2e74·6172··y=multi-user.tar | |||
| 000426e0:·6765·740a·3c2f·636f·6465·3e3c·2f70·7265··get.</code></pre | |||
| 000426f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00042700:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00042710:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00042720:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00042730:·7267·6574·3d22·2369·646d·3837·3539·2220··rget="#idm8759"· | |||
| 00042740:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00042750:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00042760:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00042770:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00042780:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00042790:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00042 | 00042390:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 00042 | 000423a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 00042 | 000423b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 00042 | 000423c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 00042 | 000423d0:·2069·643d·2269·646d·3837·3538·223e·3c70···id="idm8758"><p | ||
| 00042 | 000423e0:·7265·3e3c·636f·6465·3e0a·7661·725f·7379··re><code>.var_sy | ||
| 000423f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 00042400:·6379·3d27·3c61·6262·7220·7469·746c·653d··cy='<abbr·title= | |||
| 00042410:·2266·726f·6d20·5072·6f66·696c·652f·7265··"from·Profile/re | |||
| 00042420:·6669·6e65·2d76·616c·7565·3a20·7863·6364··fine-value:·xccd | |||
| 00042430:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | |||
| 00042440:·2e63·6f6e·7465·6e74·5f76·616c·7565·5f76··.content_value_v | |||
| 00042450:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 00042460:·5f70·6f6c·6963·7922·3e46·4950·533c·2f61··_policy">FIPS</a | |||
| 00042470:·6262·723e·270a·0a0a·7374·6465·7272·5f6f··bbr>'...stderr_o | |||
| 00042480:·665f·6361·6c6c·3d24·2875·7064·6174·652d··f_call=$(update- | |||
| 00042490:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 000424a0:·2d2d·7365·7420·247b·7661·725f·7379·7374··--set·${var_syst | |||
| 00042 | 000424b0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 00042810:·3d27·3c61·6262·7220·7469·746c·653d·2266··='<abbr·title="f | |||
| 00042820:·726f·6d20·5072·6f66·696c·652f·7265·6669··rom·Profile/refi | |||
| 00042830:·6e65·2d76·616c·7565·3a20·7863·6364·665f··ne-value:·xccdf_ | |||
| 00042840:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | |||
| 00042850:·6f6e·7465·6e74·5f76·616c·7565·5f76·6172··ontent_value_var | |||
| 00042860:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 00042870:·6f6c·6963·7922·3e46·4950·533c·2f61·6262··olicy">FIPS</abb | |||
| 00042880:·723e·270a·0a0a·7374·6465·7272·5f6f·665f··r>'...stderr_of_ | |||
| 00042890:·6361·6c6c·3d24·2875·7064·6174·652d·6372··call=$(update-cr | |||
| 000428a0:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 000428b0:·7365·7420·247b·7661·725f·7379·7374·656d··set·${var_system | |||
| 000428c0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d20··_crypto_policy}· | |||
| 00042 | 000424c0:·7d20·3226·6774·3b26·616d·703b·3120·2667··}·2>&1·&g | ||
| 00042 | 000424d0:·743b·202f·6465·762f·6e75·6c6c·290a·7263··t;·/dev/null).rc | ||
| 00042 | 000424e0:·3d24·3f0a·0a69·6620·7465·7374·2022·2472··=$?..if·test·"$r | ||
| 00042 | 000424f0:·6322·203d·2031·3237·3b20·7468·656e·0a09··c"·=·127;·then.. | ||
| 00042 | 00042500:·6563·686f·2022·2473·7464·6572·725f·6f66··echo·"$stderr_of | ||
| 00042 | 00042510:·5f63·616c·6c22·2026·6774·3b26·616d·703b··_call"·>& | ||
| 00042 | 00042520:·320a·0965·6368·6f20·224d·616b·6520·7375··2..echo·"Make·su | ||
| 00042 | 00042530:·7265·2074·6861·7420·7468·6520·7363·7269··re·that·the·scri | ||
| Max diff block lines reached; 2254746/2272464 bytes (99.22%) of diff not shown. | |||
| Offset 75, 15 lines modified | Offset 75, 15 lines modified | ||
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 79 | ····*·cpe:/o:centos:centos:8 | 79 | ····*·cpe:/o:centos:centos:8 |
| 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 508, 14 lines modified | Offset 508, 33 lines modified | ||
| 508 | ··-·PCI-DSSv4-2.2.7 | 508 | ··-·PCI-DSSv4-2.2.7 |
| 509 | ··-·configure_crypto_policy | 509 | ··-·configure_crypto_policy |
| 510 | ··-·high_severity | 510 | ··-·high_severity |
| 511 | ··-·low_complexity | 511 | ··-·low_complexity |
| 512 | ··-·low_disruption | 512 | ··-·low_disruption |
| 513 | ··-·no_reboot_needed | 513 | ··-·no_reboot_needed |
| 514 | ··-·restrict_strategy | 514 | ··-·restrict_strategy |
| 515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 516 | var_system_crypto_policy='FIPS' | ||
| 517 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 518 | rc=$? | ||
| 519 | if·test·"$rc"·=·127;·then | ||
| 520 | » echo·"$stderr_of_call"·>&2 | ||
| 521 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 522 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 523 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 524 | » false··#·end·with·an·error·code | ||
| 525 | elif·test·"$rc"·!=·0;·then | ||
| 526 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 527 | » false··#·end·with·an·error·code | ||
| 528 | fi | ||
| 515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 516 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 517 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 518 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 519 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 520 | --- | 534 | --- |
| 521 | apiVersion:·machineconfiguration.openshift.io/v1 | 535 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 533, 33 lines modified | Offset 552, 14 lines modified | ||
| 533 | ············Before=kubelet.service | 552 | ············Before=kubelet.service |
| 534 | ············[Service] | 553 | ············[Service] |
| 535 | ············Type=oneshot | 554 | ············Type=oneshot |
| 536 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 555 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 537 | ············RemainAfterExit=yes | 556 | ············RemainAfterExit=yes |
| 538 | ············[Install] | 557 | ············[Install] |
| 539 | ············WantedBy=multi-user.target | 558 | ············WantedBy=multi-user.target |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 541 | var_system_crypto_policy='FIPS' | ||
| 542 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 543 | rc=$? | ||
| 544 | if·test·"$rc"·=·127;·then | ||
| 545 | » echo·"$stderr_of_call"·>&2 | ||
| 546 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 547 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 548 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 549 | » false··#·end·with·an·error·code | ||
| 550 | elif·test·"$rc"·!=·0;·then | ||
| 551 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 552 | » false··#·end·with·an·error·code | ||
| 553 | fi | ||
| 554 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 555 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 560 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 556 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 561 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 557 | Severity: ··medium | 562 | Severity: ··medium |
| 558 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 563 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 559 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 564 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 560 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 565 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1518, 14 lines modified | Offset 1518, 25 lines modified | ||
| 1518 | ············_\x8c_\x8u_\x8i·····3.4.5 | 1518 | ············_\x8c_\x8u_\x8i·····3.4.5 |
| 1519 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1519 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1520 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1520 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1521 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1521 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1522 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1522 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1523 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1523 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1524 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule | 1524 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule |
| 1525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1526 | [customizations.services] | ||
| 1527 | masked·=·["debug-shell"] | ||
| 1528 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1529 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1530 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1531 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1532 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1533 | service·disable·debug-shell | ||
| 1525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1535 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1536 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1537 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1538 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1530 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1539 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1531 | ····the·System | 1540 | ····the·System |
| Offset 1599, 44 lines modified | Offset 1610, 14 lines modified | ||
| 1599 | ··-·NIST-800-53-CM-6 | 1610 | ··-·NIST-800-53-CM-6 |
| 1600 | ··-·disable_strategy | 1611 | ··-·disable_strategy |
| 1601 | ··-·low_complexity | 1612 | ··-·low_complexity |
| 1602 | ··-·low_disruption | 1613 | ··-·low_disruption |
| 1603 | ··-·medium_severity | 1614 | ··-·medium_severity |
| 1604 | ··-·no_reboot_needed | 1615 | ··-·no_reboot_needed |
| 1605 | ··-·service_debug-shell_disabled | 1616 | ··-·service_debug-shell_disabled |
| 1606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1607 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1608 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1609 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1610 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1611 | service·disable·debug-shell | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 150644/157252 bytes (95.80%) of diff not shown. | |||
| Offset 14562, 15 lines modified | Offset 14562, 15 lines modified | ||
| 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038e80:·206f·6620·3230·323 | 00038e80:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 17333, 236 lines modified | Offset 17333, 236 lines modified | ||
| 00043b40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00043b40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00043b50:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 00043b50:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 00043b60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00043b60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00043b70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00043b70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00043b80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00043b80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00043b90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00043b90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00043ba0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00043ba0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00043bb0:·656d·6564·6961·7469·6f6e·204 | 00043bb0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 00043bc0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00043bd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00043be0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00043bf0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00043c00:·646d·3830·3032·223e·3c74·6162·6c65·2063··dm8002"><table·c | |||
| 00043c10:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00043c20:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00043c30:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00043c40:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00043 | 00043bc0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 00043bd0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00043be0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00043bf0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00043c00:·7073·6522·2069·643d·2269·646d·3830·3032··pse"·id="idm8002 | |||
| 00043c10:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 00043c20:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00043c30:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 00043c40:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 00043c50:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00043c60:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00043c70:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00043c80:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00043c90:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 00043ca0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 00043cb0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00043cc0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00043cd0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00043ce0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00043cf0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00043d00:·7469·6f6e·2041·6e61·636f·6e64·6120·736e··tion·Anaconda·sn | |||
| 00043d10:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00043d20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00043d30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00043d40:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 00043d50:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00043d60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00043d70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00043d80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00043d90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00043da0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00043db0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00043dc0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00043 | 00043dd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00043 | 00043de0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 00043df0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00043e00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00043e10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00043e20:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00043e30:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00043e40:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00043e50:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 00043e60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00043e70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00043e80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00043e90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00043ea0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00043eb0:·2223·6964·6d38·3030·3422·2074·6162·696e··"#idm8004"·tabin | |||
| 00043ec0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00043ed0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043ee0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043ef0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043f00:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00043f10:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 00043f20:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00043f30:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00043f40:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00043f50:·7365·2220·6964·3d22·6964·6d38·3030·3422··se"·id="idm8004" | |||
| 00043f60:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00043f70:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00043f80:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00043f90:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00043fa0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00043 | 00043fb0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00043 | 00043fc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00043ca0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00043cb0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00043cc0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00043cd0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00043ce0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00043cf0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00043d00:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 00043d10:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 00043d20:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 00043d30:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 00043d40:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00043d50:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 00043d60:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00043d70:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00043d80:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00043d90:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00043da0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 00043db0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 00043dc0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 00043dd0:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 00043de0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 00043df0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 00043e00:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 00043e10:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 00043e20:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 00043e30:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 00043e40:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00043e50:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00043e60:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| Max diff block lines reached; 2587379/2619725 bytes (98.77%) of diff not shown. | |||
| Offset 73, 15 lines modified | Offset 73, 15 lines modified | ||
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 77 | ····*·cpe:/o:centos:centos:8 | 77 | ····*·cpe:/o:centos:centos:8 |
| 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 587, 14 lines modified | Offset 587, 33 lines modified | ||
| 587 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 587 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 588 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 588 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 589 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 589 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 590 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 590 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 591 | ············_\x8c_\x8i_\x8s············5.3.1 | 591 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 592 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 592 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 593 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 593 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 595 | [[packages]] | ||
| 596 | name·=·"aide" | ||
| 597 | version·=·"*" | ||
| 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 603 | package·--add=aide | ||
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 609 | package·install·aide | ||
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 610 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 611 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 612 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 613 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 614 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 599 | -·name:·Ensure·aide·is·installed | 615 | -·name:·Ensure·aide·is·installed |
| 600 | ··package: | 616 | ··package: |
| Offset 609, 26 lines modified | Offset 628, 14 lines modified | ||
| 609 | ··-·PCI-DSSv4-11.5.2 | 628 | ··-·PCI-DSSv4-11.5.2 |
| 610 | ··-·enable_strategy | 629 | ··-·enable_strategy |
| 611 | ··-·low_complexity | 630 | ··-·low_complexity |
| 612 | ··-·low_disruption | 631 | ··-·low_disruption |
| 613 | ··-·medium_severity | 632 | ··-·medium_severity |
| 614 | ··-·no_reboot_needed | 633 | ··-·no_reboot_needed |
| 615 | ··-·package_aide_installed | 634 | ··-·package_aide_installed |
| 616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 617 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 618 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 619 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 620 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 621 | package·install·aide | ||
| 622 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 623 | [[packages]] | ||
| 624 | name·=·"aide" | ||
| 625 | version·=·"*" | ||
| 626 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 635 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 627 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 636 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 628 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 637 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 629 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 638 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 630 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 639 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 631 | #·Remediation·is·applicable·only·in·certain·platforms | 640 | #·Remediation·is·applicable·only·in·certain·platforms |
| 632 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 641 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 648, 21 lines modified | Offset 655, 14 lines modified | ||
| 648 | include·install_aide | 655 | include·install_aide |
| 649 | class·install_aide·{ | 656 | class·install_aide·{ |
| 650 | ··package·{·'aide': | 657 | ··package·{·'aide': |
| 651 | ····ensure·=>·'installed', | 658 | ····ensure·=>·'installed', |
| 652 | ··} | 659 | ··} |
| 653 | } | 660 | } |
| 654 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 655 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 656 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 657 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 658 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 659 | package·--add=aide | ||
| 660 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 661 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 661 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 662 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 662 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 663 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 663 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 664 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 664 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 665 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 682, 14 lines modified | Offset 682, 18 lines modified | ||
| 682 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 682 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 683 | ············_\x8i_\x8s_\x8m······1446 | 683 | ············_\x8i_\x8s_\x8m······1446 |
| 684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 688 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 688 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 690 | [customizations] | ||
| 691 | fips·=·true | ||
| 689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 690 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 693 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 691 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 694 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 692 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 695 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 693 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 696 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 694 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 697 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 695 | ··set_fact: | 698 | ··set_fact: |
| Offset 789, 18 lines modified | Offset 793, 14 lines modified | ||
| 789 | ··-·NIST-800-53-SC-13 | 793 | ··-·NIST-800-53-SC-13 |
| 790 | ··-·enable_fips_mode | 794 | ··-·enable_fips_mode |
| 791 | ··-·high_severity | 795 | ··-·high_severity |
| 792 | ··-·medium_complexity | 796 | ··-·medium_complexity |
| 793 | ··-·medium_disruption | 797 | ··-·medium_disruption |
| 794 | ··-·reboot_required | 798 | ··-·reboot_required |
| 795 | ··-·restrict_strategy | 799 | ··-·restrict_strategy |
| 796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 218933/225262 bytes (97.19%) of diff not shown. | |||
| Offset 14556, 15 lines modified | Offset 14556, 15 lines modified | ||
| 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038e20:·2032·3032·3 | 00038e20:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15331, 235 lines modified | Offset 15331, 235 lines modified | ||
| 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003be90:·6961·7469·6f6e·204 | 0003be90:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003bea0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003beb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bec0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bed0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bee0:·2069·643d·2269·646d·3830·3032·223e·3c70···id="idm8002"><p | |||
| 0003bea0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003beb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bec0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bed0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003bee0:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003bef0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bf00:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bf10:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bf20:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bf30:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bf40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bf50:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bf60:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bf70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bf80:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bf90:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bfa0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bfb0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bfc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bfd0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bfe0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003bff0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c000:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c010:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c020:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c030:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003c040:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003c050:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003c060:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003c070:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003c080:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003c090:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c0a0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c0b0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c0c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c0d0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c0e0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c0f0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c100:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c110:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c120:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c130:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c140:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c150:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c160:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c170:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c180:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c190:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c1a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c1b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c1c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c1d0:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c1e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c1f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c200:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c210:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c220:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c230:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003c240:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c270:·7365·2220·6964·3d22·6964·6d38·3030·3322··se"·id="idm8003" | |||
| 0003c280:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c290:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c2a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c2b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c2c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c2d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c2e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c2f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c300:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c310:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c320:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c330:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c340:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c350:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c360:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003 | 0003bef0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 0003bf00:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003bf10:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003c380:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003c390:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c3a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c3b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c3c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c3d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c3e0:·2223·6964·6d38·3030·3422·2074·6162·696e··"#idm8004"·tabin | |||
| 0003c3f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c400:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c410:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c420:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c430:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c440:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003c450:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c460:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c470:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c480:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c490:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| Max diff block lines reached; 4681979/4714187 bytes (99.32%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 130, 14 lines modified | Offset 130, 33 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 143 | ··package: | 159 | ··package: |
| Offset 152, 26 lines modified | Offset 171, 14 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 171 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 172 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 173 | ··-·low_complexity |
| 155 | ··-·low_disruption | 174 | ··-·low_disruption |
| 156 | ··-·medium_severity | 175 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·install·aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | 183 | #·Remediation·is·applicable·only·in·certain·platforms |
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 184 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 191, 21 lines modified | Offset 198, 14 lines modified | ||
| 191 | include·install_aide | 198 | include·install_aide |
| 192 | class·install_aide·{ | 199 | class·install_aide·{ |
| 193 | ··package·{·'aide': | 200 | ··package·{·'aide': |
| 194 | ····ensure·=>·'installed', | 201 | ····ensure·=>·'installed', |
| 195 | ··} | 202 | ··} |
| 196 | } | 203 | } |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 202 | package·--add=aide | ||
| 203 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 204 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 204 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 205 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 205 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 206 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 206 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 207 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 322, 14 lines modified | Offset 322, 18 lines modified | ||
| 322 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 322 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 323 | ············_\x8i_\x8s_\x8m······1446 | 323 | ············_\x8i_\x8s_\x8m······1446 |
| 324 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 324 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 325 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 325 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 326 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 326 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [customizations] | ||
| 331 | fips·=·true | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 334 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 337 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 335 | ··set_fact: | 338 | ··set_fact: |
| Offset 429, 18 lines modified | Offset 433, 14 lines modified | ||
| 429 | ··-·NIST-800-53-SC-13 | 433 | ··-·NIST-800-53-SC-13 |
| 430 | ··-·enable_fips_mode | 434 | ··-·enable_fips_mode |
| 431 | ··-·high_severity | 435 | ··-·high_severity |
| 432 | ··-·medium_complexity | 436 | ··-·medium_complexity |
| 433 | ··-·medium_disruption | 437 | ··-·medium_disruption |
| 434 | ··-·reboot_required | 438 | ··-·reboot_required |
| 435 | ··-·restrict_strategy | 439 | ··-·restrict_strategy |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 475612/481961 bytes (98.68%) of diff not shown. | |||
| Offset 14550, 16 lines modified | Offset 14550, 16 lines modified | ||
| 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038dc0:·2020·2028·6173·206f·6620·3230·323 | 00038dc0:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00038dd0:·3 | 00038dd0:·312d·3039·290a·2020·2020·2020·2020·2020··1-09).·········· | ||
| 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 16668, 236 lines modified | Offset 16668, 236 lines modified | ||
| 000411b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000411b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000411c0:·646d·3830·3032·2220·7461·6269·6e64·6578··dm8002"·tabindex | 000411c0:·646d·3830·3032·2220·7461·6269·6e64·6578··dm8002"·tabindex | ||
| 000411d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000411d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000411e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000411e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000411f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000411f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00041200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00041200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00041210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00041210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00041220:·6d65·6469·6174·696f·6e20·4 | 00041220:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00041230:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00041240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00041250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041270:·7365·2220·6964·3d22·6964·6d38·3030·3222··se"·id="idm8002" | |||
| 00041230:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00041240:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041250:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041260:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041270:·6d38·3030·3222·3e3c·7461·626c·6520·636c··m8002"><table·cl | |||
| 00041280:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041290:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000412a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000412b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000412c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000412d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000412e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000412f0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00041300:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00041310:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00041320:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00041330:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00041340:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00041350:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00041360:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00041370:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 00041380:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 00041390:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 000413a0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 000413b0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 000413c0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 000413d0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000413e0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000413f0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00041400:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00041410:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00041420:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 00041430:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 00041440:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 00041450:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 00041460:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 00041470:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 00041480:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 00041490:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 000414a0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 000414b0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 000414c0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 000414d0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 000414e0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 000414f0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 00041500:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 00041510:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00041520:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00041530:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00041540:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00041550:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00041560:·6574·3d22·2369·646d·3830·3033·2220·7461··et="#idm8003"·ta | |||
| 00041570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00041580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00041590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000415a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000415b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000415c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 000415d0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 000415e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000415f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041600:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 00041610:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 00041620:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041630:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00041640:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041650:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041660:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041670:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041680:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00041690:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000416a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000416b0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000416c0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000416d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000416e0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 000416f0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00041 | 00041280:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 00041290:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000412a0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 00041710:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 00041720:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00041730:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00041740:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00041750:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00041760:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00041770:·6574·3d22·2369·646d·3830·3034·2220·7461··et="#idm8004"·ta | |||
| 00041780:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00041790:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000417a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000417b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000417c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000417d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 000417e0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000417f0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 00041800:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041810:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 2898331/2930815 bytes (98.89%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 443, 14 lines modified | Offset 443, 33 lines modified | ||
| 443 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 443 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 444 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 444 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 445 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 445 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 446 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 446 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 447 | ············_\x8c_\x8i_\x8s············5.3.1 | 447 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 448 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 448 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 449 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 449 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 451 | [[packages]] | ||
| 452 | name·=·"aide" | ||
| 453 | version·=·"*" | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·--add=aide | ||
| 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 465 | package·install·aide | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 455 | -·name:·Ensure·aide·is·installed | 471 | -·name:·Ensure·aide·is·installed |
| 456 | ··package: | 472 | ··package: |
| Offset 465, 26 lines modified | Offset 484, 14 lines modified | ||
| 465 | ··-·PCI-DSSv4-11.5.2 | 484 | ··-·PCI-DSSv4-11.5.2 |
| 466 | ··-·enable_strategy | 485 | ··-·enable_strategy |
| 467 | ··-·low_complexity | 486 | ··-·low_complexity |
| 468 | ··-·low_disruption | 487 | ··-·low_disruption |
| 469 | ··-·medium_severity | 488 | ··-·medium_severity |
| 470 | ··-·no_reboot_needed | 489 | ··-·no_reboot_needed |
| 471 | ··-·package_aide_installed | 490 | ··-·package_aide_installed |
| 472 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 473 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 474 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 475 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 476 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 477 | package·install·aide | ||
| 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 479 | [[packages]] | ||
| 480 | name·=·"aide" | ||
| 481 | version·=·"*" | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 487 | #·Remediation·is·applicable·only·in·certain·platforms | 496 | #·Remediation·is·applicable·only·in·certain·platforms |
| 488 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 497 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 504, 21 lines modified | Offset 511, 14 lines modified | ||
| 504 | include·install_aide | 511 | include·install_aide |
| 505 | class·install_aide·{ | 512 | class·install_aide·{ |
| 506 | ··package·{·'aide': | 513 | ··package·{·'aide': |
| 507 | ····ensure·=>·'installed', | 514 | ····ensure·=>·'installed', |
| 508 | ··} | 515 | ··} |
| 509 | } | 516 | } |
| 510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 515 | package·--add=aide | ||
| 516 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 517 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 517 | Run·the·following·command·to·generate·a·new·database: | 518 | Run·the·following·command·to·generate·a·new·database: |
| 518 | $·sudo·/usr/sbin/aide·--init | 519 | $·sudo·/usr/sbin/aide·--init |
| 519 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 520 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 520 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 521 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 521 | To·initiate·a·manual·check,·run·the·following·command: | 522 | To·initiate·a·manual·check,·run·the·following·command: |
| 522 | $·sudo·/usr/sbin/aide·--check | 523 | $·sudo·/usr/sbin/aide·--check |
| Offset 863, 14 lines modified | Offset 863, 33 lines modified | ||
| 863 | ··-·PCI-DSSv4-2.2.7 | 863 | ··-·PCI-DSSv4-2.2.7 |
| 864 | ··-·configure_crypto_policy | 864 | ··-·configure_crypto_policy |
| 865 | ··-·high_severity | 865 | ··-·high_severity |
| 866 | ··-·low_complexity | 866 | ··-·low_complexity |
| 867 | ··-·low_disruption | 867 | ··-·low_disruption |
| 868 | ··-·no_reboot_needed | 868 | ··-·no_reboot_needed |
| 869 | ··-·restrict_strategy | 869 | ··-·restrict_strategy |
| 870 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 871 | var_system_crypto_policy='DEFAULT' | ||
| 872 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 873 | rc=$? | ||
| 874 | if·test·"$rc"·=·127;·then | ||
| 875 | » echo·"$stderr_of_call"·>&2 | ||
| 876 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 877 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 878 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 879 | » false··#·end·with·an·error·code | ||
| 880 | elif·test·"$rc"·!=·0;·then | ||
| 881 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 882 | » false··#·end·with·an·error·code | ||
| 883 | fi | ||
| 870 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 884 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 871 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 885 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 228142/233654 bytes (97.64%) of diff not shown. | |||
| Offset 14560, 15 lines modified | Offset 14560, 15 lines modified | ||
| 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038e60:·3032·3 | 00038e60:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | ||
| 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c040:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003c050:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003c060:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c070:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c080:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c090:·6d38·3030·3222·3e3c·7072·653e·3c63·6f64··m8002"><pre><cod | |||
| 0003c0a0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003c0b0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003c0c0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003c040:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003c050:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c060:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c070:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c080:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | |||
| 0003c090:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c0a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c0b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c0c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c0d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c0e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c0f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c100:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c110:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c120:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c130:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c150:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c160:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c170:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c180:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003c190:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003c1a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003c1b0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003c1c0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003c1d0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003c1e0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003c1f0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003c200:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003c210:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003c220:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003c230:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003c240:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003c250:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003c260:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003c270:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c280:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c290:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c2a0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c2b0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c2c0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c2d0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c2e0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c2f0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c300:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c310:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003c320:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003c330:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c340:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c350:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c360:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003c370:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c380:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003c390:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c3a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c3b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c3c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c3d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c3e0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003c3f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c400:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c410:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c420:·2269·646d·3830·3033·223e·3c74·6162·6c65··"idm8003"><table | |||
| 0003c430:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c440:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c450:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c460:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c470:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c480:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c490:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c4a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c4b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c4c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c4d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c4e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c4f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c500:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c510:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c520:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003c530:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003c540:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c550:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c560:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c570:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003c580:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c590:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | |||
| 0003c5a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c5b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c5c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c5d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c5e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c5f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c600:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c610:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c620:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 4854179/4886387 bytes (99.34%) of diff not shown. | |||
| Offset 72, 15 lines modified | Offset 72, 15 lines modified | ||
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 76 | ····*·cpe:/o:centos:centos:8 | 76 | ····*·cpe:/o:centos:centos:8 |
| 77 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 77 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 78 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 78 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 79 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 79 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 80 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 81 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 81 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 82 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 82 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 83 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 83 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 84 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 135, 14 lines modified | Offset 135, 33 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············5.3.1 | 139 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·--add=aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 163 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 164 | ··package: |
| Offset 157, 26 lines modified | Offset 176, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 176 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 177 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 178 | ··-·low_complexity |
| 160 | ··-·low_disruption | 179 | ··-·low_disruption |
| 161 | ··-·medium_severity | 180 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | 188 | #·Remediation·is·applicable·only·in·certain·platforms |
| 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 189 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 196, 21 lines modified | Offset 203, 14 lines modified | ||
| 196 | include·install_aide | 203 | include·install_aide |
| 197 | class·install_aide·{ | 204 | class·install_aide·{ |
| 198 | ··package·{·'aide': | 205 | ··package·{·'aide': |
| 199 | ····ensure·=>·'installed', | 206 | ····ensure·=>·'installed', |
| 200 | ··} | 207 | ··} |
| 201 | } | 208 | } |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 207 | package·--add=aide | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Run·the·following·command·to·generate·a·new·database: | 210 | Run·the·following·command·to·generate·a·new·database: |
| 210 | $·sudo·/usr/sbin/aide·--init | 211 | $·sudo·/usr/sbin/aide·--init |
| 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 212 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 213 | To·initiate·a·manual·check,·run·the·following·command: | 214 | To·initiate·a·manual·check,·run·the·following·command: |
| 214 | $·sudo·/usr/sbin/aide·--check | 215 | $·sudo·/usr/sbin/aide·--check |
| Offset 1717, 14 lines modified | Offset 1717, 18 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1717 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1718 | ············_\x8i_\x8s_\x8m······1446 | 1718 | ············_\x8i_\x8s_\x8m······1446 |
| 1719 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1719 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1720 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1720 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1721 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1721 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1722 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1722 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1723 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1723 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [customizations] | ||
| 1726 | fips·=·true | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1727 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1728 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1729 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1730 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1731 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1729 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1732 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1730 | ··set_fact: | 1733 | ··set_fact: |
| Offset 1824, 18 lines modified | Offset 1828, 14 lines modified | ||
| 1824 | ··-·NIST-800-53-SC-13 | 1828 | ··-·NIST-800-53-SC-13 |
| 1825 | ··-·enable_fips_mode | 1829 | ··-·enable_fips_mode |
| 1826 | ··-·high_severity | 1830 | ··-·high_severity |
| 1827 | ··-·medium_complexity | 1831 | ··-·medium_complexity |
| 1828 | ··-·medium_disruption | 1832 | ··-·medium_disruption |
| 1829 | ··-·reboot_required | 1833 | ··-·reboot_required |
| 1830 | ··-·restrict_strategy | 1834 | ··-·restrict_strategy |
| 1831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 436994/442937 bytes (98.66%) of diff not shown. | |||
| Offset 14584, 15 lines modified | Offset 14584, 15 lines modified | ||
| 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038fe0:·6f66·2032·3032·3 | 00038fe0:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15377, 235 lines modified | Offset 15377, 235 lines modified | ||
| 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c170:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c180:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c190:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c1a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c1b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c1c0:·646d·3830·3032·223e·3c70·7265·3e3c·636f··dm8002"><pre><co | |||
| 0003c170:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c180:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c190:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c1a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c1b0:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | |||
| 0003c1c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c1d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c1e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c1f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c200:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c210:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c220:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c230:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c240:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c250:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c260:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c280:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c290:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c2a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c2b0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003c2c0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c2d0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c2e0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c2f0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c300:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003c310:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003c320:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003c330:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003c340:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003c350:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003c360:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003c370:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c380:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c390:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c3a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c3b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c3c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c3d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c3e0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c3f0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c400:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c410:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c420:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c430:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c440:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c450:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c460:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c470:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c480:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c490:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c4a0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c4b0:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c510:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003c520:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c530:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c540:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c550:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c560:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c570:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c580:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c590:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c5a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c5b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c5c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c5d0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c5e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c5f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c600:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c610:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c620:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c630:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c640:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c | 0003c1d0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | ||
| 0003c1e0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003c1f0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003c660:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003c670:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c680:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c690:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c6a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c6b0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c6c0:·3030·3422·2074·6162·696e·6465·783d·2230··004"·tabindex="0 | |||
| 0003c6d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c6e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c6f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c700:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c710:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c720:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003c730:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c740:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c750:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c760:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| Max diff block lines reached; 4774810/4807018 bytes (99.33%) of diff not shown. | |||
| Offset 78, 15 lines modified | Offset 78, 15 lines modified | ||
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 82 | ····*·cpe:/o:centos:centos:8 | 82 | ····*·cpe:/o:centos:centos:8 |
| 83 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 84 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 84 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 85 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 85 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 86 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 86 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 87 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 87 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 88 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 88 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 89 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 89 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 90 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 91 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 92 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 92 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 140, 14 lines modified | Offset 140, 33 lines modified | ||
| 140 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 140 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 142 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 142 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 143 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 143 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 144 | ············_\x8c_\x8i_\x8s············5.3.1 | 144 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 146 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·--add=aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·install·aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | -·name:·Ensure·aide·is·installed | 168 | -·name:·Ensure·aide·is·installed |
| 153 | ··package: | 169 | ··package: |
| Offset 162, 26 lines modified | Offset 181, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 181 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 182 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 183 | ··-·low_complexity |
| 165 | ··-·low_disruption | 184 | ··-·low_disruption |
| 166 | ··-·medium_severity | 185 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 187 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·install·aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | 193 | #·Remediation·is·applicable·only·in·certain·platforms |
| 185 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 194 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 201, 21 lines modified | Offset 208, 14 lines modified | ||
| 201 | include·install_aide | 208 | include·install_aide |
| 202 | class·install_aide·{ | 209 | class·install_aide·{ |
| 203 | ··package·{·'aide': | 210 | ··package·{·'aide': |
| 204 | ····ensure·=>·'installed', | 211 | ····ensure·=>·'installed', |
| 205 | ··} | 212 | ··} |
| 206 | } | 213 | } |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | package·--add=aide | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Run·the·following·command·to·generate·a·new·database: | 215 | Run·the·following·command·to·generate·a·new·database: |
| 215 | $·sudo·/usr/sbin/aide·--init | 216 | $·sudo·/usr/sbin/aide·--init |
| 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 217 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 218 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 218 | To·initiate·a·manual·check,·run·the·following·command: | 219 | To·initiate·a·manual·check,·run·the·following·command: |
| 219 | $·sudo·/usr/sbin/aide·--check | 220 | $·sudo·/usr/sbin/aide·--check |
| Offset 1722, 14 lines modified | Offset 1722, 18 lines modified | ||
| 1722 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1722 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1723 | ············_\x8i_\x8s_\x8m······1446 | 1723 | ············_\x8i_\x8s_\x8m······1446 |
| 1724 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1724 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1725 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1725 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1726 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1726 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1727 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1727 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1728 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1728 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1730 | [customizations] | ||
| 1731 | fips·=·true | ||
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1733 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1731 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1734 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1732 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1735 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1733 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1736 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1734 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1737 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1735 | ··set_fact: | 1738 | ··set_fact: |
| Offset 1829, 18 lines modified | Offset 1833, 14 lines modified | ||
| 1829 | ··-·NIST-800-53-SC-13 | 1833 | ··-·NIST-800-53-SC-13 |
| 1830 | ··-·enable_fips_mode | 1834 | ··-·enable_fips_mode |
| 1831 | ··-·high_severity | 1835 | ··-·high_severity |
| 1832 | ··-·medium_complexity | 1836 | ··-·medium_complexity |
| 1833 | ··-·medium_disruption | 1837 | ··-·medium_disruption |
| 1834 | ··-·reboot_required | 1838 | ··-·reboot_required |
| 1835 | ··-·restrict_strategy | 1839 | ··-·restrict_strategy |
| 1836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 429223/435166 bytes (98.63%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038690:·6620·3230·323 | 00038690:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15180, 234 lines modified | Offset 15180, 234 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20·4 | 0003b520:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b530:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b540:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b550:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b560:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b570:·6d37·3237·3322·3e3c·7461·626c·6520·636c··m7273"><table·cl | |||
| 0003b580:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b590:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b5a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b5b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b5c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b5d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b5e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b5 | 0003b530:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b540:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b550:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b560:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b570:·7365·2220·6964·3d22·6964·6d37·3237·3322··se"·id="idm7273" | |||
| 0003b580:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b590:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b5a0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b5b0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b5c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b5d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b5e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b5f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3732·3734··target="#idm7274 | |||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b670:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003b680:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b690:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b6a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b6b0:·7073·6522·2069·643d·2269·646d·3732·3734··pse"·id="idm7274 | |||
| 0003b6c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b6d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b6e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b6f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b700:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b710:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b | 0003b720:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b610:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b620:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b730:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b740:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b750:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b | 0003b760:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b770:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b780:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b790:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b7a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b7b0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003b7c0:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003b7d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b7e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b7f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b800:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b650:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b660:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b670:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b680:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b690:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b6a0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b6b0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b6c0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b6d0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b6e0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b6f0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b700:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b710:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b720:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b730:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b740:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b750:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b760:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b770:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b780:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b790:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b7a0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b7b0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b7c0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b7d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b7e0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b7f0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b800:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b810:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b8 | 0003b810:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b820:·2369·646d·3732·3735·2220·7461·6269·6e64··#idm7275"·tabind | |||
| 0003b830:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b840:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b850:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b860:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b870:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b880:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b890:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3732·3735·223e··e"·id="idm7275"> | |||
| 0003b8d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b8e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| Max diff block lines reached; 3947917/3979987 bytes (99.19%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8c_\x8i_\x8s············6.1.1 | 124 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 140, 26 lines modified | Offset 159, 14 lines modified | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 141 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 161 | ··-·low_complexity |
| 143 | ··-·low_disruption | 162 | ··-·low_disruption |
| 144 | ··-·medium_severity | 163 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 146 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 171 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 186, 14 lines modified | ||
| 179 | include·install_aide | 186 | include·install_aide |
| 180 | class·install_aide·{ | 187 | class·install_aide·{ |
| 181 | ··package·{·'aide': | 188 | ··package·{·'aide': |
| 182 | ····ensure·=>·'installed', | 189 | ····ensure·=>·'installed', |
| 183 | ··} | 190 | ··} |
| 184 | } | 191 | } |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 321, 50 lines modified | Offset 321, 50 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 321 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 322 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 322 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 326 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 326 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 327 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 327 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | logvol·/home·1024 | ||
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | [[customizations.filesystem]] | 329 | [[customizations.filesystem]] |
| 332 | mountpoint·=·"/home" | 330 | mountpoint·=·"/home" |
| 333 | size·=·1073741824 | 331 | size·=·1073741824 |
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 339 | part·/home | 337 | part·/home |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | logvol·/home·1024 | ||
| 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 342 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 342 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 250146/256655 bytes (97.46%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038680:·6620·3230·323 | 00038680:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15185, 234 lines modified | Offset 15185, 234 lines modified | ||
| 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b570:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b570:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b580:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b590:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b5a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b5b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b5c0:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 0003b5d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b5e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b5f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b600:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b610:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b620:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b630:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b | 0003b580:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b590:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b5a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b5b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b5c0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b5d0:·3733·223e·3c70·7265·3e3c·636f·6465·3e0a··73"><pre><code>. | |||
| 0003b5e0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b5f0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b600:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b610:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b620:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b630:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b640:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b650:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b660:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b670:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b680:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b690:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b6a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b6b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b6c0:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003b6d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b6e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b6f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b700:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b710:·3237·3422·3e3c·7461·626c·6520·636c·6173··274"><table·clas | |||
| 0003b720:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b730:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b740:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b750:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b760:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b | 0003b770:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b660:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003b780:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b790:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b | 0003b7a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b7b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b7c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b7f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b800:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b810:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003b820:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b830:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b840:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b850:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b860:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b870:·743d·2223·6964·6d37·3237·3522·2074·6162··t="#idm7275"·tab | |||
| 0003b880:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b890:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b8a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b8b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b8c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b8d0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b8e0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b8f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b900:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b910:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b920:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b930:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b940:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b950:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b960:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003b970:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b6a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b6b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b6c0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b6d0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b6e0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b6f0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b700:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b710:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b720:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b730:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b740:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b750:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b760:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b770:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b780:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b790:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b7a0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b7b0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b7c0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b7d0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b7e0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b7f0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b800:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b810:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b820:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b830:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| Max diff block lines reached; 4042281/4074351 bytes (99.21%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 77 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 78 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 78 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 149 | ··package: |
| Offset 141, 26 lines modified | Offset 160, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 162 | ··-·low_complexity |
| 144 | ··-·low_disruption | 163 | ··-·low_disruption |
| 145 | ··-·medium_severity | 164 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 187, 14 lines modified | ||
| 180 | include·install_aide | 187 | include·install_aide |
| 181 | class·install_aide·{ | 188 | class·install_aide·{ |
| 182 | ··package·{·'aide': | 189 | ··package·{·'aide': |
| 183 | ····ensure·=>·'installed', | 190 | ····ensure·=>·'installed', |
| 184 | ··} | 191 | ··} |
| 185 | } | 192 | } |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 788, 50 lines modified | Offset 788, 50 lines modified | ||
| 788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 789 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 789 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 790 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 790 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 791 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 791 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 792 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 792 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 793 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 793 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 794 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 794 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 796 | logvol·/home·1024 | ||
| 797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 798 | [[customizations.filesystem]] | 796 | [[customizations.filesystem]] |
| 799 | mountpoint·=·"/home" | 797 | mountpoint·=·"/home" |
| 800 | size·=·1073741824 | 798 | size·=·1073741824 |
| 801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 802 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 803 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 804 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 805 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 806 | part·/home | 804 | part·/home |
| 805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 806 | logvol·/home·1024 | ||
| 807 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 807 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 808 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 808 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 809 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 809 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 259257/265713 bytes (97.57%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000386a0:·6620·3230·323 | 000386a0:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15176, 234 lines modified | Offset 15176, 234 lines modified | ||
| 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4e0:·6961·7469·6f6e·204 | 0003b4e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b4f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b500:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b510:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b520:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b530:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 0003b540:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b550:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b560:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b570:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b | 0003b4f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b500:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b510:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b520:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b530:·2069·643d·2269·646d·3732·3733·223e·3c70···id="idm7273"><p | |||
| 0003b540:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b550:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b560:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b570:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b580:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b590:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b5b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5c0:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 0003b5d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b5e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b5f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b600:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b610:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b620:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b630:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| 0003b640:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b650:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b660:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b670:·2220·6964·3d22·6964·6d37·3237·3422·3e3c··"·id="idm7274">< | |||
| 0003b680:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b690:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b6a0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b6b0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b6d0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b6e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b6f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b | 0003b700:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b710:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b720:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b730:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b740:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b750:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b760:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b770:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b780:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 0003b790:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b7a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7c0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7e0:·6d37·3237·3522·2074·6162·696e·6465·783d··m7275"·tabindex= | |||
| 0003b7f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b800:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b810:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b820:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b830:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b840:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003b850:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b880:·6964·3d22·6964·6d37·3237·3522·3e3c·7461··id="idm7275"><ta | |||
| 0003b890:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b8a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b8b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b8c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b8d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003b8e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003b8f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b900:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b5d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b600:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b610:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b620:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b630:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b640:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b650:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b660:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b670:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b680:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b690:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b6a0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b6b0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b6c0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b6d0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b6e0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b6f0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b700:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b710:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b720:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b730:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b740:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b750:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b760:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b770:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b780:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| Max diff block lines reached; 2568434/2579804 bytes (99.56%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 14 lines modified | Offset 135, 33 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·--add=aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 163 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 164 | ··package: |
| Offset 156, 26 lines modified | Offset 175, 14 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 177 | ··-·low_complexity |
| 159 | ··-·low_disruption | 178 | ··-·low_disruption |
| 160 | ··-·medium_severity | 179 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | 187 | #·Remediation·is·applicable·only·in·certain·platforms |
| 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 195, 21 lines modified | Offset 202, 14 lines modified | ||
| 195 | include·install_aide | 202 | include·install_aide |
| 196 | class·install_aide·{ | 203 | class·install_aide·{ |
| 197 | ··package·{·'aide': | 204 | ··package·{·'aide': |
| 198 | ····ensure·=>·'installed', | 205 | ····ensure·=>·'installed', |
| 199 | ··} | 206 | ··} |
| 200 | } | 207 | } |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 209 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/sbin/aide·--init | 210 | $·sudo·/usr/sbin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 212 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 213 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 214 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 360, 56 lines modified | Offset 360, 56 lines modified | ||
| 360 | ···························7.6 | 360 | ···························7.6 |
| 361 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 361 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 362 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 362 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 363 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 363 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 365 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 365 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 366 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 366 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | logvol·/home·1024 | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | [[customizations.filesystem]] | 368 | [[customizations.filesystem]] |
| 371 | mountpoint·=·"/home" | 369 | mountpoint·=·"/home" |
| 372 | size·=·1073741824 | 370 | size·=·1073741824 |
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 378 | part·/home | 376 | part·/home |
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 378 | logvol·/home·1024 | ||
| 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| Max diff block lines reached; 174154/180103 bytes (96.70%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038690:·323 | 00038690:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14854, 217 lines modified | Offset 14854, 217 lines modified | ||
| 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | ||
| 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003a0d0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003a0e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a0f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a100:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a110:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a120:·3130·3632·3222·3e3c·7072·653e·3c63·6f64··10622"><pre><cod | |||
| 0003a130:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003a140:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 0003a150:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 0003a160:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003a170:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003a180:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003a0d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003a0e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a0f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a100:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a110:·643d·2269·646d·3130·3632·3222·3e3c·7461··d="idm10622"><ta | |||
| 0003a120:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a130:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a140:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a150:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a160:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a170:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a190:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a1b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a1c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a1d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a1e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a1f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003a200:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a210:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003a220:·7572·6520·646e·662d·6175·746f·6d61·7469··ure·dnf-automati | |||
| 0003a230:·6320·6973·2069·6e73·7461·6c6c·6564·0a20··c·is·installed.· | |||
| 0003a240:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003a250:·6d65·3a20·646e·662d·6175·746f·6d61·7469··me:·dnf-automati | |||
| 0003a260:·630a·2020·2020·7374·6174·653a·2070·7265··c.····state:·pre | |||
| 0003a270:·7365·6e74·0a20·2074·6167·733a·0a20·202d··sent.··tags:.··- | |||
| 0003a280:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003a290:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003a2a0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003a2b0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003a2c0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003a2d0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003a2e0:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 0003a2f0:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 0003a300:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003a310:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003a320:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003a | 0003a190:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003a340:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003a350:·7267·6574·3d22·2369·646d·3130·3632·3322··rget="#idm10623" | |||
| 0003a360:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003a370:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003a380:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003a390:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003a3a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003a3b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003a3c0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003a3d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003a3e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003a | 0003a1a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003a400:·6d31·3036·3233·223e·3c74·6162·6c65·2063··m10623"><table·c | |||
| 0003a410:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003a420:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003a430:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003a440:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003a450:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003a460:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a470:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003a | 0003a1b0:·6172·6765·743d·2223·6964·6d31·3036·3233··arget="#idm10623 | ||
| 0003a1c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003a1d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003a1e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003a1f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003a200:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003a210:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003a220:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003a230:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003a240:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003a250:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003a260:·7073·6522·2069·643d·2269·646d·3130·3632··pse"·id="idm1062 | |||
| 0003a270:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003a280:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a290:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a2a0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003a2b0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a2c0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a | 0003a2d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003a2e0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a4a0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003a4b0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003a4c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a4d0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003a4e0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003a4f0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003a500:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003a510:·2064·6e66·2d61·7574·6f6d·6174·6963·0a3c···dnf-automatic.< | |||
| 0003a520:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003a530:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003a540:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003a550:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| Max diff block lines reached; 368410/398134 bytes (92.53%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 101, 14 lines modified | Offset 101, 33 lines modified | ||
| 101 | $·sudo·dnf·install·dnf-automatic | 101 | $·sudo·dnf·install·dnf-automatic |
| 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 103 | ············suitable·for·automatic,·regular·execution. | 103 | ············suitable·for·automatic,·regular·execution. |
| 104 | Severity: ··medium | 104 | Severity: ··medium |
| 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"dnf-automatic" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=dnf-automatic | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·dnf-automatic | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·dnf-automatic·is·installed | 129 | -·name:·Ensure·dnf-automatic·is·installed |
| 114 | ··package: | 130 | ··package: |
| Offset 117, 26 lines modified | Offset 136, 14 lines modified | ||
| 117 | ··tags: | 136 | ··tags: |
| 118 | ··-·enable_strategy | 137 | ··-·enable_strategy |
| 119 | ··-·low_complexity | 138 | ··-·low_complexity |
| 120 | ··-·low_disruption | 139 | ··-·low_disruption |
| 121 | ··-·medium_severity | 140 | ··-·medium_severity |
| 122 | ··-·no_reboot_needed | 141 | ··-·no_reboot_needed |
| 123 | ··-·package_dnf-automatic_installed | 142 | ··-·package_dnf-automatic_installed |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·install·dnf-automatic | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"dnf-automatic" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 148 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 150, 21 lines modified | Offset 157, 14 lines modified | ||
| 150 | include·install_dnf-automatic | 157 | include·install_dnf-automatic |
| 151 | class·install_dnf-automatic·{ | 158 | class·install_dnf-automatic·{ |
| 152 | ··package·{·'dnf-automatic': | 159 | ··package·{·'dnf-automatic': |
| 153 | ····ensure·=>·'installed', | 160 | ····ensure·=>·'installed', |
| 154 | ··} | 161 | ··} |
| 155 | } | 162 | } |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=dnf-automatic | ||
| 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 163 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 164 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 164 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 165 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 165 | automatic.conf. | 166 | automatic.conf. |
| 166 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 167 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 167 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 168 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 168 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 169 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 8934, 14 lines modified | Offset 8934, 28 lines modified | ||
| 8934 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 8934 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 8935 | ···························A.9.1.2 | 8935 | ···························A.9.1.2 |
| 8936 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 8936 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 8937 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 8937 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 8938 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 8938 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 8939 | ············_\x8c_\x8i_\x8s············2.1.3 | 8939 | ············_\x8c_\x8i_\x8s············2.1.3 |
| 8940 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 8940 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 8941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8942 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8943 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8944 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8945 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 8946 | package·--remove=dhcp | ||
| 8947 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 8948 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8949 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8950 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8951 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 8952 | package·remove·dhcp | ||
| 8941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8942 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8954 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8943 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8955 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8944 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8956 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8945 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 8957 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 8946 | -·name:·Ensure·dhcp·is·removed | 8958 | -·name:·Ensure·dhcp·is·removed |
| 8947 | ··package: | 8959 | ··package: |
| Max diff block lines reached; 36198/41832 bytes (86.53%) of diff not shown. | |||
| Offset 14406, 15 lines modified | Offset 14406, 15 lines modified | ||
| 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 000384c0:·206f·6620·3230·323 | 000384c0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15219, 233 lines modified | Offset 15219, 233 lines modified | ||
| 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b790:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b7a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b7b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b7c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b7d0:·2069·643d·2269·646d·3732·3733·223e·3c74···id="idm7273"><t | |||
| 0003b7e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b7f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b800:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b810:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b820:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b830:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b840:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b790:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b7a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b7b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b7c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b7d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b7e0:·646d·3732·3733·223e·3c70·7265·3e3c·636f··dm7273"><pre><co | |||
| 0003b7f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b800:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b810:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b820:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b830:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b840:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b850:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b860:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b870:·6964·6d37·3237·3422·2074·6162·696e·6465··idm7274"·tabinde | |||
| 0003b880:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b890:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b8a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b8b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b8c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b8d0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003b8e0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003b8f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b900:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b910:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b920:·6964·6d37·3237·3422·3e3c·7461·626c·6520··idm7274"><table· | |||
| 0003b930:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b940:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b950:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b960:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b970:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b980:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b870:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b990:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b9a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b | 0003b9b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b9c0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b9d0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b9e0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b8a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b8b0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b8c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b8d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b8e0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b8f0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b900:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b910:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b920:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b930:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b940:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b950:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b960:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b970:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b980:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b990:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b9a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b9b0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b9c0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b9d0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b9e0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b9f0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003ba00:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ba10:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ba20:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ba30:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ba40:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003ba50:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003ba60:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ba70:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba80:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ba90:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003baa0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bab0:·646d·3732·3734·2220·7461·6269·6e64·6578··dm7274"·tabindex | |||
| 0003bac0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bad0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bae0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003baf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bb00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bb10:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003bb20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bb30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bb40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bb50:·2069·643d·2269·646d·3732·3734·223e·3c74···id="idm7274"><t | |||
| 0003bb60:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bb70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bb80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bb90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bba0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b9f0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003bbc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003ba00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003ba10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| Max diff block lines reached; 5430718/5462650 bytes (99.42%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 125, 14 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 125 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8c_\x8i_\x8s············6.1.1 | 130 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·install·aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 153 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 154 | ··package: |
| Offset 146, 26 lines modified | Offset 165, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 165 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 166 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 167 | ··-·low_complexity |
| 149 | ··-·low_disruption | 168 | ··-·low_disruption |
| 150 | ··-·medium_severity | 169 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 171 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·install·aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | #·Remediation·is·applicable·only·in·certain·platforms | 177 | #·Remediation·is·applicable·only·in·certain·platforms |
| 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 185, 21 lines modified | Offset 192, 14 lines modified | ||
| 185 | include·install_aide | 192 | include·install_aide |
| 186 | class·install_aide·{ | 193 | class·install_aide·{ |
| 187 | ··package·{·'aide': | 194 | ··package·{·'aide': |
| 188 | ····ensure·=>·'installed', | 195 | ····ensure·=>·'installed', |
| 189 | ··} | 196 | ··} |
| 190 | } | 197 | } |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=aide | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 202 | To·initiate·a·manual·check,·run·the·following·command: | 203 | To·initiate·a·manual·check,·run·the·following·command: |
| 203 | $·sudo·/usr/sbin/aide·--check | 204 | $·sudo·/usr/sbin/aide·--check |
| Offset 701, 14 lines modified | Offset 701, 33 lines modified | ||
| 701 | ··-·PCI-DSSv4-2.2.7 | 701 | ··-·PCI-DSSv4-2.2.7 |
| 702 | ··-·configure_crypto_policy | 702 | ··-·configure_crypto_policy |
| 703 | ··-·high_severity | 703 | ··-·high_severity |
| 704 | ··-·low_complexity | 704 | ··-·low_complexity |
| 705 | ··-·low_disruption | 705 | ··-·low_disruption |
| 706 | ··-·no_reboot_needed | 706 | ··-·no_reboot_needed |
| 707 | ··-·restrict_strategy | 707 | ··-·restrict_strategy |
| 708 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 709 | var_system_crypto_policy='' | ||
| 710 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 711 | rc=$? | ||
| 712 | if·test·"$rc"·=·127;·then | ||
| 713 | » echo·"$stderr_of_call"·>&2 | ||
| 714 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 715 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 716 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 717 | » false··#·end·with·an·error·code | ||
| 718 | elif·test·"$rc"·!=·0;·then | ||
| 719 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 720 | » false··#·end·with·an·error·code | ||
| 721 | fi | ||
| 708 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 709 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 420787/426303 bytes (98.71%) of diff not shown. | |||
| Offset 14407, 15 lines modified | Offset 14407, 15 lines modified | ||
| 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000384d0:·323 | 000384d0:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15187, 234 lines modified | Offset 15187, 234 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20·4 | 0003b590:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b5a0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b5b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b5d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5e0:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b5f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b600:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b610:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b620:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b630:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b640:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b650:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003b5a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b5b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b5f0:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0003b600:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b610:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b620:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b630:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b640:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b650:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b660:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b670:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b680:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b690:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b6a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b6b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b6d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b6e0:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b6f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b700:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b710:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b720:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b730:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 0003b740:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b750:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b760:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b770:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b780:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b790:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b680:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b7a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b7b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b7c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b7d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b7e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b7f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b800:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b810:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b820:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b830:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b840:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b850:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b860:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b870:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b880:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b890:·3d22·2369·646d·3732·3735·2220·7461·6269··="#idm7275"·tabi | |||
| 0003b8a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b8b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b8c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8f0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b900:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b910:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b920:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b930:·7073·6522·2069·643d·2269·646d·3732·3735··pse"·id="idm7275 | |||
| 0003b940:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b950:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b960:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b970:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b980:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b990:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b6c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b6d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6e0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b6f0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b700:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b710:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b720:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b730:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b740:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b750:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b760:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b770:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b780:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b790:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b7a0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b7b0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b7c0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b7d0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b7e0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b7f0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b800:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b810:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b820:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b830:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b840:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b850:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| Max diff block lines reached; 3450284/3482354 bytes (99.08%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 149 | ··package: |
| Offset 141, 26 lines modified | Offset 160, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 162 | ··-·low_complexity |
| 144 | ··-·low_disruption | 163 | ··-·low_disruption |
| 145 | ··-·medium_severity | 164 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 187, 14 lines modified | ||
| 180 | include·install_aide | 187 | include·install_aide |
| 181 | class·install_aide·{ | 188 | class·install_aide·{ |
| 182 | ··package·{·'aide': | 189 | ··package·{·'aide': |
| 183 | ····ensure·=>·'installed', | 190 | ····ensure·=>·'installed', |
| 184 | ··} | 191 | ··} |
| 185 | } | 192 | } |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 696, 14 lines modified | Offset 696, 33 lines modified | ||
| 696 | ··-·PCI-DSSv4-2.2.7 | 696 | ··-·PCI-DSSv4-2.2.7 |
| 697 | ··-·configure_crypto_policy | 697 | ··-·configure_crypto_policy |
| 698 | ··-·high_severity | 698 | ··-·high_severity |
| 699 | ··-·low_complexity | 699 | ··-·low_complexity |
| 700 | ··-·low_disruption | 700 | ··-·low_disruption |
| 701 | ··-·no_reboot_needed | 701 | ··-·no_reboot_needed |
| 702 | ··-·restrict_strategy | 702 | ··-·restrict_strategy |
| 703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 704 | var_system_crypto_policy='' | ||
| 705 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 706 | rc=$? | ||
| 707 | if·test·"$rc"·=·127;·then | ||
| 708 | » echo·"$stderr_of_call"·>&2 | ||
| 709 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 710 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 711 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 712 | » false··#·end·with·an·error·code | ||
| 713 | elif·test·"$rc"·!=·0;·then | ||
| 714 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 715 | » false··#·end·with·an·error·code | ||
| 716 | fi | ||
| 703 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 717 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 704 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 718 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 296706/302232 bytes (98.17%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15178, 234 lines modified | Offset 15178, 234 lines modified | ||
| 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b500:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b500:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b510:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b520:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b530:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b540:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b550:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 0003b560:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b570:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b580:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b590:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b5a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b5b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b5c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b5 | 0003b510:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b520:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b530:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b540:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b550:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b560:·3733·223e·3c70·7265·3e3c·636f·6465·3e0a··73"><pre><code>. | |||
| 0003b570:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b580:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b590:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b5a0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b5b0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b5c0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b5d0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b5e0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b5f0:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b600:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b610:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b620:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b630:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b640:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b650:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003b660:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b670:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b680:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b690:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b6a0:·3237·3422·3e3c·7461·626c·6520·636c·6173··274"><table·clas | |||
| 0003b6b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b6c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b6d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b6e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b6f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b | 0003b700:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b5f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003b710:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b720:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b | 0003b730:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b740:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b750:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b760:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b770:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b780:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b790:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b7a0:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003b7b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b800:·743d·2223·6964·6d37·3237·3522·2074·6162··t="#idm7275"·tab | |||
| 0003b810:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b820:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b830:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b840:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b850:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b860:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b870:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b880:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b890:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8a0:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b8b0:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b8c0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8d0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8e0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b8f0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003b900:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b630:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b640:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b650:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b660:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b670:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b680:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b690:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b6a0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b6b0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b6c0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b6d0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b6e0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b6f0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b700:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b710:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b720:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b730:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b740:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b750:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b760:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b770:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b780:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b790:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b7a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b7b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b7c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| Max diff block lines reached; 3189010/3221080 bytes (99.00%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 33 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·--add=aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 146 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 147 | ··package: |
| Offset 139, 26 lines modified | Offset 158, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 160 | ··-·low_complexity |
| 142 | ··-·low_disruption | 161 | ··-·low_disruption |
| 143 | ··-·medium_severity | 162 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 185, 14 lines modified | ||
| 178 | include·install_aide | 185 | include·install_aide |
| 179 | class·install_aide·{ | 186 | class·install_aide·{ |
| 180 | ··package·{·'aide': | 187 | ··package·{·'aide': |
| 181 | ····ensure·=>·'installed', | 188 | ····ensure·=>·'installed', |
| 182 | ··} | 189 | ··} |
| 183 | } | 190 | } |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 694, 14 lines modified | Offset 694, 33 lines modified | ||
| 694 | ··-·PCI-DSSv4-2.2.7 | 694 | ··-·PCI-DSSv4-2.2.7 |
| 695 | ··-·configure_crypto_policy | 695 | ··-·configure_crypto_policy |
| 696 | ··-·high_severity | 696 | ··-·high_severity |
| 697 | ··-·low_complexity | 697 | ··-·low_complexity |
| 698 | ··-·low_disruption | 698 | ··-·low_disruption |
| 699 | ··-·no_reboot_needed | 699 | ··-·no_reboot_needed |
| 700 | ··-·restrict_strategy | 700 | ··-·restrict_strategy |
| 701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 702 | var_system_crypto_policy='' | ||
| 703 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 704 | rc=$? | ||
| 705 | if·test·"$rc"·=·127;·then | ||
| 706 | » echo·"$stderr_of_call"·>&2 | ||
| 707 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 708 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 709 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 710 | » false··#·end·with·an·error·code | ||
| 711 | elif·test·"$rc"·!=·0;·then | ||
| 712 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 713 | » false··#·end·with·an·error·code | ||
| 714 | fi | ||
| 701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 715 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 702 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 716 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 273531/279067 bytes (98.02%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15210, 234 lines modified | Offset 15210, 234 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b710:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b720:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b730:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b740:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b750:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b760:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b770:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b780:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b790:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b7a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b7b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b7 | 0003b700:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b710:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b720:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b730:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b740:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b750:·6964·3d22·6964·6d37·3237·3322·3e3c·7072··id="idm7273"><pr | |||
| 0003b760:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b770:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b780:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b790:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b7a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b7b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b7c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b7d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b7e0:·6574·3d22·2369·646d·3732·3734·2220·7461··et="#idm7274"·ta | |||
| 0003b7f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b800:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b810:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b820:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b830:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b840:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b850:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 0003b860:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b870:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b880:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b890:·2069·643d·2269·646d·3732·3734·223e·3c74···id="idm7274"><t | |||
| 0003b8a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b8b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b8c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b8d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b8e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b8f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b900:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b7f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b800:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b | 0003b910:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b920:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b930:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b940:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b950:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b960:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b970:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b980:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b990:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003b9a0:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 0003b9b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b9c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b9d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b9e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ba00:·3732·3735·2220·7461·6269·6e64·6578·3d22··7275"·tabindex=" | |||
| 0003ba10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ba20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ba30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ba40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba60:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003ba70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ba80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ba90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003baa0:·643d·2269·646d·3732·3735·223e·3c74·6162··d="idm7275"><tab | |||
| 0003bab0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bac0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bad0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bae0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003baf0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b830:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b840:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b850:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b860:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b870:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b880:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b890:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b8a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b8b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b8c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b8d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b8e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b8f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b900:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b910:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b920:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b930:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b940:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b950:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b960:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b970:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b980:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b990:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b9a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b9b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b9c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| Max diff block lines reached; 5289907/5321977 bytes (99.40%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 123, 14 lines modified | Offset 123, 33 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8c_\x8i_\x8s············6.1.1 | 128 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·--add=aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·install·aide | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 151 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 152 | ··package: |
| Offset 144, 26 lines modified | Offset 163, 14 lines modified | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 145 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 165 | ··-·low_complexity |
| 147 | ··-·low_disruption | 166 | ··-·low_disruption |
| 148 | ··-·medium_severity | 167 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·install·aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | 175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 190, 14 lines modified | ||
| 183 | include·install_aide | 190 | include·install_aide |
| 184 | class·install_aide·{ | 191 | class·install_aide·{ |
| 185 | ··package·{·'aide': | 192 | ··package·{·'aide': |
| 186 | ····ensure·=>·'installed', | 193 | ····ensure·=>·'installed', |
| 187 | ··} | 194 | ··} |
| 188 | } | 195 | } |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 198 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 201 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 202 | $·sudo·/usr/sbin/aide·--check |
| Offset 699, 14 lines modified | Offset 699, 33 lines modified | ||
| 699 | ··-·PCI-DSSv4-2.2.7 | 699 | ··-·PCI-DSSv4-2.2.7 |
| 700 | ··-·configure_crypto_policy | 700 | ··-·configure_crypto_policy |
| 701 | ··-·high_severity | 701 | ··-·high_severity |
| 702 | ··-·low_complexity | 702 | ··-·low_complexity |
| 703 | ··-·low_disruption | 703 | ··-·low_disruption |
| 704 | ··-·no_reboot_needed | 704 | ··-·no_reboot_needed |
| 705 | ··-·restrict_strategy | 705 | ··-·restrict_strategy |
| 706 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 707 | var_system_crypto_policy='' | ||
| 708 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 709 | rc=$? | ||
| 710 | if·test·"$rc"·=·127;·then | ||
| 711 | » echo·"$stderr_of_call"·>&2 | ||
| 712 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 713 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 714 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 715 | » false··#·end·with·an·error·code | ||
| 716 | elif·test·"$rc"·!=·0;·then | ||
| 717 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 718 | » false··#·end·with·an·error·code | ||
| 719 | fi | ||
| 706 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 720 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 707 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 721 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 406523/412059 bytes (98.66%) of diff not shown. | |||
| Offset 14419, 16 lines modified | Offset 14419, 16 lines modified | ||
| 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·2020·2020·2028·6173·206f·6620·3230·323 | 00038590:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 000385a0:·2d31·3 | 000385a0:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16736, 131 lines modified | Offset 16736, 131 lines modified | ||
| 000415f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000415f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00041600:·2369·646d·3739·3437·2220·7461·6269·6e64··#idm7947"·tabind | 00041600:·2369·646d·3739·3437·2220·7461·6269·6e64··#idm7947"·tabind | ||
| 00041610:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00041610:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00041620:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00041620:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00041630:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00041630:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00041640:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00041640:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00041650:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00041650:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00041660:·5265·6d65·6469·6174·696f·6e20· | 00041660:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 00041670:·726e·6574·6573·2073·6e69·7070·6574·20e2··rnetes·snippet·. | |||
| 00041680:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00041690:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 000416a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 000416b0:·643d·2269·646d·3739·3437·223e·3c74·6162··d="idm7947"><tab | |||
| 000416c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 000416d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 000416e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 000416f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00041700:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00041710:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041720:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00041730:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00041740:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00041750:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00041760:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00041770:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00041780:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00041790:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 000417a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 000417b0:·636f·6465·3e2d·2d2d·0a61·7069·5665·7273··code>---.apiVers | |||
| 000417c0:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | |||
| 000417d0:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | |||
| 000417e0:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | |||
| 000417f0:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | |||
| 00041800:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | |||
| 00041810:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | |||
| 00041820:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | |||
| 00041830:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | |||
| 00041840:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | |||
| 00041850:·2020·202d·206e·616d·653a·2063·6f6e·6669·····-·name:·confi | |||
| 00041860:·6775·7265·2d63·7279·7074·6f2d·706f·6c69··gure-crypto-poli | |||
| 00041870:·6379·2e73·6572·7669·6365·0a20·2020·2020··cy.service.····· | |||
| 00041880:·2020·2020·2065·6e61·626c·6564·3a20·7472·······enabled:·tr | |||
| 00041890:·7565·0a20·2020·2020·2020·2020·2063·6f6e··ue.··········con | |||
| 000418a0:·7465·6e74·733a·207c·0a20·2020·2020·2020··tents:·|.······· | |||
| 000418b0:·2020·2020·205b·556e·6974·5d0a·2020·2020·······[Unit].···· | |||
| 000418c0:·2020·2020·2020·2020·4265·666f·7265·3d6b··········Before=k | |||
| 000418d0:·7562·656c·6574·2e73·6572·7669·6365·0a20··ubelet.service.· | |||
| 000418e0:·2020·2020·2020·2020·2020·205b·5365·7276·············[Serv | |||
| 000418f0:·6963·655d·0a20·2020·2020·2020·2020·2020··ice].··········· | |||
| 00041900:·2054·7970·653d·6f6e·6573·686f·740a·2020···Type=oneshot.·· | |||
| 00041910:·2020·2020·2020·2020·2020·4578·6563·5374············ExecSt | |||
| 00041920:·6172·743d·7570·6461·7465·2d63·7279·7074··art=update-crypt | |||
| 00041930:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 00041940:·207b·7b2e·7661·725f·7379·7374·656d·5f63···{{.var_system_c | |||
| 00041950:·7279·7074·6f5f·706f·6c69·6379·7d7d·0a20··rypto_policy}}.· | |||
| 00041960:·2020·2020·2020·2020·2020·2052·656d·6169·············Remai | |||
| 00041970:·6e41·6674·6572·4578·6974·3d79·6573·0a20··nAfterExit=yes.· | |||
| 00041980:·2020·2020·2020·2020·2020·205b·496e·7374·············[Inst | |||
| 00041990:·616c·6c5d·0a20·2020·2020·2020·2020·2020··all].··········· | |||
| 000419a0:·2057·616e·7465·6442·793d·6d75·6c74·692d···WantedBy=multi- | |||
| 000419b0:·7573·6572·2e74·6172·6765·740a·3c2f·636f··user.target.</co | |||
| 000419c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000419d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000419e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 000419f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00041a00:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00041a10:·646d·3739·3438·2220·7461·6269·6e64·6578··dm7948"·tabindex | |||
| 00041a20:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00041a30:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00041a40:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00041a50:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00041a60:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00041a70:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 00041 | 00041670:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 00041 | 00041680:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 00041 | 00041690:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 00041 | 000416a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 00041 | 000416b0:·3739·3437·223e·3c70·7265·3e3c·636f·6465··7947"><pre><code | ||
| 00041 | 000416c0:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | ||
| 00041 | 000416d0:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | ||
| 00041 | 000416e0:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | ||
| 00041 | 000416f0:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | ||
| 00041 | 00041700:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | ||
| 00041 | 00041710:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00041 | 00041720:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 00041 | 00041730:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 00041 | 00041740:·3e44·4546·4155·4c54·3a4e·4f2d·5348·4131··>DEFAULT:NO-SHA1 | ||
| 00041 | 00041750:·3c2f·6162·6272·3e27·0a0a·0a73·7464·6572··</abbr>'...stder | ||
| 00041 | 00041760:·725f·6f66·5f63·616c·6c3d·2428·7570·6461··r_of_call=$(upda | ||
| 00041 | 00041770:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | ||
| 00041 | 00041780:·6573·202d·2d73·6574·2024·7b76·6172·5f73··es·--set·${var_s | ||
| 00041 | 00041790:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 00041 | 000417a0:·6963·797d·2032·2667·743b·2661·6d70·3b31··icy}·2>&1 | ||
| 00041b | 000417b0:·2026·6774·3b20·2f64·6576·2f6e·756c·6c29···>·/dev/null) | ||
| 00041 | 000417c0:·0a72·633d·243f·0a0a·6966·2074·6573·7420··.rc=$?..if·test· | ||
| 00041 | 000417d0:·2224·7263·2220·3d20·3132·373b·2074·6865··"$rc"·=·127;·the | ||
| 00041 | 000417e0:·6e0a·0965·6368·6f20·2224·7374·6465·7272··n..echo·"$stderr | ||
| 00041 | 000417f0:·5f6f·665f·6361·6c6c·2220·2667·743b·2661··_of_call"·>&a | ||
| 00041 | 00041800:·6d70·3b32·0a09·6563·686f·2022·4d61·6b65··mp;2..echo·"Make | ||
| 00041 | 00041810:·2073·7572·6520·7468·6174·2074·6865·2073···sure·that·the·s | ||
| 00041 | 00041820:·6372·6970·7420·6973·2069·6e73·7461·6c6c··cript·is·install | ||
| 00041 | 00041830:·6564·206f·6e20·7468·6520·7265·6d65·6469··ed·on·the·remedi | ||
| 00041 | 00041840:·6174·6564·2073·7973·7465·6d2e·2220·2667··ated·system."·&g | ||
| 00041 | 00041850:·743b·2661·6d70·3b32·0a09·6563·686f·2022··t;&2..echo·" | ||
| 00041 | 00041860:·5365·6520·6f75·7470·7574·206f·6620·7468··See·output·of·th | ||
| 00041 | 00041870:·6520·2764·6e66·2070·726f·7669·6465·7320··e·'dnf·provides· | ||
| 00041880:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 00041890:·6c69·6369·6573·2720·636f·6d6d·616e·6422··licies'·command" | |||
| 000418a0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 000418b0:·6f20·2274·6f20·7365·6520·7768·6174·2070··o·"to·see·what·p | |||
| Max diff block lines reached; 1744616/1762610 bytes (98.98%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:10 | 63 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 64 | ····*·cpe:/o:centos:centos:10 | 64 | ····*·cpe:/o:centos:centos:10 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 480, 14 lines modified | Offset 480, 33 lines modified | ||
| 480 | ··-·PCI-DSSv4-2.2.7 | 480 | ··-·PCI-DSSv4-2.2.7 |
| 481 | ··-·configure_crypto_policy | 481 | ··-·configure_crypto_policy |
| 482 | ··-·high_severity | 482 | ··-·high_severity |
| 483 | ··-·low_complexity | 483 | ··-·low_complexity |
| 484 | ··-·low_disruption | 484 | ··-·low_disruption |
| 485 | ··-·no_reboot_needed | 485 | ··-·no_reboot_needed |
| 486 | ··-·restrict_strategy | 486 | ··-·restrict_strategy |
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 488 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 489 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 490 | rc=$? | ||
| 491 | if·test·"$rc"·=·127;·then | ||
| 492 | » echo·"$stderr_of_call"·>&2 | ||
| 493 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 494 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 495 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 496 | » false··#·end·with·an·error·code | ||
| 497 | elif·test·"$rc"·!=·0;·then | ||
| 498 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | fi | ||
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 502 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 503 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 504 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 505 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 492 | --- | 506 | --- |
| 493 | apiVersion:·machineconfiguration.openshift.io/v1 | 507 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 505, 33 lines modified | Offset 524, 14 lines modified | ||
| 505 | ············Before=kubelet.service | 524 | ············Before=kubelet.service |
| 506 | ············[Service] | 525 | ············[Service] |
| 507 | ············Type=oneshot | 526 | ············Type=oneshot |
| 508 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 527 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 509 | ············RemainAfterExit=yes | 528 | ············RemainAfterExit=yes |
| 510 | ············[Install] | 529 | ············[Install] |
| 511 | ············WantedBy=multi-user.target | 530 | ············WantedBy=multi-user.target |
| 512 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 513 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 514 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 515 | rc=$? | ||
| 516 | if·test·"$rc"·=·127;·then | ||
| 517 | » echo·"$stderr_of_call"·>&2 | ||
| 518 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 519 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 520 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 521 | » false··#·end·with·an·error·code | ||
| 522 | elif·test·"$rc"·!=·0;·then | ||
| 523 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 524 | » false··#·end·with·an·error·code | ||
| 525 | fi | ||
| 526 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 531 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 527 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 532 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 528 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 533 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 529 | Severity: ··medium | 534 | Severity: ··medium |
| 530 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 535 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 531 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 536 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 532 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 537 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 856, 14 lines modified | Offset 856, 33 lines modified | ||
| 856 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 856 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 857 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 857 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 858 | The·rear·package·can·be·installed·with·the·following·command: | 858 | The·rear·package·can·be·installed·with·the·following·command: |
| 859 | $·sudo·dnf·install·rear | 859 | $·sudo·dnf·install·rear |
| 860 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 860 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 861 | Severity: ·medium | 861 | Severity: ·medium |
| 862 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 862 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 864 | [[packages]] | ||
| 865 | name·=·"rear" | ||
| 866 | version·=·"*" | ||
| 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 872 | package·--add=rear | ||
| 873 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 874 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 875 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 876 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 877 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 878 | package·install·rear | ||
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 879 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 880 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 881 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 882 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 883 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 868 | -·name:·Ensure·rear·is·installed | 884 | -·name:·Ensure·rear·is·installed |
| 869 | ··package: | 885 | ··package: |
| Offset 877, 26 lines modified | Offset 896, 14 lines modified | ||
| 877 | ··tags: | 896 | ··tags: |
| 878 | ··-·enable_strategy | 897 | ··-·enable_strategy |
| 879 | ··-·low_complexity | 898 | ··-·low_complexity |
| 880 | ··-·low_disruption | 899 | ··-·low_disruption |
| 881 | ··-·medium_severity | 900 | ··-·medium_severity |
| 882 | ··-·no_reboot_needed | 901 | ··-·no_reboot_needed |
| 883 | ··-·package_rear_installed | 902 | ··-·package_rear_installed |
| 884 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 885 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 137753/144145 bytes (95.57%) of diff not shown. | |||
| Offset 14439, 15 lines modified | Offset 14439, 15 lines modified | ||
| 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000386d0:·7320·6f66·2032·3032·3 | 000386d0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16801, 129 lines modified | Offset 16801, 129 lines modified | ||
| 00041a00:·7461·7267·6574·3d22·2369·646d·3739·3437··target="#idm7947 | 00041a00:·7461·7267·6574·3d22·2369·646d·3739·3437··target="#idm7947 | ||
| 00041a10:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00041a10:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00041a20:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00041a20:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00041a30:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00041a30:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00041a40:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00041a40:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00041a50:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00041a50:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00041a60:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00041a60:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00041a70:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00041a80:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00041a90:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00041aa0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041ab0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 00041ac0:·3437·223e·3c74·6162·6c65·2063·6c61·7373··47"><table·class | |||
| 00041ad0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041ae0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00041af0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041b00:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041b10:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041b20:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041b30:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00041b40:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041b50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041b60:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00041b70:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 00041b80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00041b90:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 00041ba0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00041bb0:·653e·3c70·7265·3e3c·636f·6465·3e2d·2d2d··e><pre><code>--- | |||
| 00041bc0:·0a61·7069·5665·7273·696f·6e3a·206d·6163··.apiVersion:·mac | |||
| 00041bd0:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | |||
| 00041be0:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | |||
| 00041bf0:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | |||
| 00041c00:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | |||
| 00041c10:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | |||
| 00041c20:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | |||
| 00041c30:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | |||
| 00041c40:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | |||
| 00041c50:·733a·0a20·2020·2020·2020·202d·206e·616d··s:.········-·nam | |||
| 00041c60:·653a·2063·6f6e·6669·6775·7265·2d63·7279··e:·configure-cry | |||
| 00041c70:·7074·6f2d·706f·6c69·6379·2e73·6572·7669··pto-policy.servi | |||
| 00041c80:·6365·0a20·2020·2020·2020·2020·2065·6e61··ce.··········ena | |||
| 00041c90:·626c·6564·3a20·7472·7565·0a20·2020·2020··bled:·true.····· | |||
| 00041ca0:·2020·2020·2063·6f6e·7465·6e74·733a·207c·······contents:·| | |||
| 00041cb0:·0a20·2020·2020·2020·2020·2020·205b·556e··.············[Un | |||
| 00041cc0:·6974·5d0a·2020·2020·2020·2020·2020·2020··it].············ | |||
| 00041cd0:·4265·666f·7265·3d6b·7562·656c·6574·2e73··Before=kubelet.s | |||
| 00041ce0:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00041cf0:·2020·205b·5365·7276·6963·655d·0a20·2020·····[Service].··· | |||
| 00041d00:·2020·2020·2020·2020·2054·7970·653d·6f6e···········Type=on | |||
| 00041d10:·6573·686f·740a·2020·2020·2020·2020·2020··eshot.·········· | |||
| 00041d20:·2020·4578·6563·5374·6172·743d·7570·6461····ExecStart=upda | |||
| 00041d30:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 00041d40:·6573·202d·2d73·6574·207b·7b2e·7661·725f··es·--set·{{.var_ | |||
| 00041d50:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00041d60:·6c69·6379·7d7d·0a20·2020·2020·2020·2020··licy}}.········· | |||
| 00041d70:·2020·2052·656d·6169·6e41·6674·6572·4578·····RemainAfterEx | |||
| 00041d80:·6974·3d79·6573·0a20·2020·2020·2020·2020··it=yes.········· | |||
| 00041d90:·2020·205b·496e·7374·616c·6c5d·0a20·2020·····[Install].··· | |||
| 00041da0:·2020·2020·2020·2020·2057·616e·7465·6442···········WantedB | |||
| 00041db0:·793d·6d75·6c74·692d·7573·6572·2e74·6172··y=multi-user.tar | |||
| 00041dc0:·6765·740a·3c2f·636f·6465·3e3c·2f70·7265··get.</code></pre | |||
| 00041dd0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00041de0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00041df0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00041e00:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00041e10:·7267·6574·3d22·2369·646d·3739·3438·2220··rget="#idm7948"· | |||
| 00041e20:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00041e30:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00041e40:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00041e50:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00041e60:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00041e70:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00041 | 00041a70:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 00041 | 00041a80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 00041 | 00041a90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 00041 | 00041aa0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 00041 | 00041ab0:·2069·643d·2269·646d·3739·3437·223e·3c70···id="idm7947"><p | ||
| 00041 | 00041ac0:·7265·3e3c·636f·6465·3e0a·7661·725f·7379··re><code>.var_sy | ||
| 00041 | 00041ad0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00041 | 00041ae0:·6379·3d27·3c61·6262·7220·7469·746c·653d··cy='<abbr·title= | ||
| 00041f0 | 00041af0:·2266·726f·6d20·4265·6e63·686d·6172·6b2f··"from·Benchmark/ | ||
| 00041 | 00041b00:·5661·6c75·653a·2078·6363·6466·5f6f·7267··Value:·xccdf_org | ||
| 00041 | 00041b10:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00041 | 00041b20:·656e·745f·7661·6c75·655f·7661·725f·7379··ent_value_var_sy | ||
| 00041 | 00041b30:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00041 | 00041b40:·6379·223e·4445·4641·554c·543c·2f61·6262··cy">DEFAULT</abb | ||
| 00041 | 00041b50:·723e·270a·0a0a·7374·6465·7272·5f6f·665f··r>'...stderr_of_ | ||
| 00041 | 00041b60:·6361·6c6c·3d24·2875·7064·6174·652d·6372··call=$(update-cr | ||
| 00041 | 00041b70:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | ||
| 00041 | 00041b80:·7365·7420·247b·7661·725f·7379·7374·656d··set·${var_system | ||
| 00041 | 00041b90:·5f63·7279·7074·6f5f·706f·6c69·6379·7d20··_crypto_policy}· | ||
| 00041 | 00041ba0:·3226·6774·3b26·616d·703b·3120·2667·743b··2>&1·> | ||
| 00041 | 00041bb0:·202f·6465·762f·6e75·6c6c·290a·7263·3d24···/dev/null).rc=$ | ||
| 00041bc0:·3f0a·0a69·6620·7465·7374·2022·2472·6322··?..if·test·"$rc" | |||
| 00041bd0:·203d·2031·3237·3b20·7468·656e·0a09·6563···=·127;·then..ec | |||
| 00041be0:·686f·2022·2473·7464·6572·725f·6f66·5f63··ho·"$stderr_of_c | |||
| 00041bf0:·616c·6c22·2026·6774·3b26·616d·703b·320a··all"·>&2. | |||
| 00041c00:·0965·6368·6f20·224d·616b·6520·7375·7265··.echo·"Make·sure | |||
| 00041c10:·2074·6861·7420·7468·6520·7363·7269·7074···that·the·script | |||
| 00041c20:·2069·7320·696e·7374·616c·6c65·6420·6f6e···is·installed·on | |||
| 00041c30:·2074·6865·2072·656d·6564·6961·7465·6420···the·remediated· | |||
| 00041c40:·7379·7374·656d·2e22·2026·6774·3b26·616d··system."·>&am | |||
| 00041c50:·703b·320a·0965·6368·6f20·2253·6565·206f··p;2..echo·"See·o | |||
| 00041c60:·7574·7075·7420·6f66·2074·6865·2027·646e··utput·of·the·'dn | |||
| 00041c70:·6620·7072·6f76·6964·6573·2075·7064·6174··f·provides·updat | |||
| 00041c80:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 00041c90:·7327·2063·6f6d·6d61·6e64·2220·2667·743b··s'·command"·> | |||
| 00041ca0:·2661·6d70·3b32·0a09·6563·686f·2022·746f··&2..echo·"to | |||
| 00041cb0:·2073·6565·2077·6861·7420·7061·636b·6167···see·what·packag | |||
| 00041cc0:·6520·746f·2028·7265·2969·6e73·7461·6c6c··e·to·(re)install | |||
| 00041cd0:·2220·2667·743b·2661·6d70·3b32·0a0a·0966··"·>&2...f | |||
| Max diff block lines reached; 2632852/2650432 bytes (99.34%) of diff not shown. | |||
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ··············(HIPAA) | 66 | ··············(HIPAA) |
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 69 | ····*·cpe:/o:redhat:enterprise_linux:10 | 69 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 70 | ····*·cpe:/o:centos:centos:10 | 70 | ····*·cpe:/o:centos:centos:10 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 495, 14 lines modified | Offset 495, 33 lines modified | ||
| 495 | ··-·PCI-DSSv4-2.2.7 | 495 | ··-·PCI-DSSv4-2.2.7 |
| 496 | ··-·configure_crypto_policy | 496 | ··-·configure_crypto_policy |
| 497 | ··-·high_severity | 497 | ··-·high_severity |
| 498 | ··-·low_complexity | 498 | ··-·low_complexity |
| 499 | ··-·low_disruption | 499 | ··-·low_disruption |
| 500 | ··-·no_reboot_needed | 500 | ··-·no_reboot_needed |
| 501 | ··-·restrict_strategy | 501 | ··-·restrict_strategy |
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 503 | var_system_crypto_policy='DEFAULT' | ||
| 504 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 505 | rc=$? | ||
| 506 | if·test·"$rc"·=·127;·then | ||
| 507 | » echo·"$stderr_of_call"·>&2 | ||
| 508 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 509 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 510 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 511 | » false··#·end·with·an·error·code | ||
| 512 | elif·test·"$rc"·!=·0;·then | ||
| 513 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 514 | » false··#·end·with·an·error·code | ||
| 515 | fi | ||
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 516 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 503 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 517 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 504 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 518 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 505 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 519 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 506 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 520 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 507 | --- | 521 | --- |
| 508 | apiVersion:·machineconfiguration.openshift.io/v1 | 522 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 520, 33 lines modified | Offset 539, 14 lines modified | ||
| 520 | ············Before=kubelet.service | 539 | ············Before=kubelet.service |
| 521 | ············[Service] | 540 | ············[Service] |
| 522 | ············Type=oneshot | 541 | ············Type=oneshot |
| 523 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 542 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 524 | ············RemainAfterExit=yes | 543 | ············RemainAfterExit=yes |
| 525 | ············[Install] | 544 | ············[Install] |
| 526 | ············WantedBy=multi-user.target | 545 | ············WantedBy=multi-user.target |
| 527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 528 | var_system_crypto_policy='DEFAULT' | ||
| 529 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 530 | rc=$? | ||
| 531 | if·test·"$rc"·=·127;·then | ||
| 532 | » echo·"$stderr_of_call"·>&2 | ||
| 533 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 534 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 535 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 536 | » false··#·end·with·an·error·code | ||
| 537 | elif·test·"$rc"·!=·0;·then | ||
| 538 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 539 | » false··#·end·with·an·error·code | ||
| 540 | fi | ||
| 541 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 546 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 542 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 547 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 543 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 548 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 544 | Severity: ··medium | 549 | Severity: ··medium |
| 545 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 550 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 546 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 551 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 547 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 552 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 634, 29 lines modified | Offset 634, 29 lines modified | ||
| 634 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) | 634 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) |
| 635 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 | 635 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 |
| 636 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 636 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 | 637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 |
| 638 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 | 638 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 |
| 639 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 639 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 640 | ············_\x8c_\x8i_\x8s············1.1.2.7.1 | 640 | ············_\x8c_\x8i_\x8s············1.1.2.7.1 |
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 642 | logvol·/var/log/audit·10240 | ||
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 644 | [[customizations.filesystem]] | 642 | [[customizations.filesystem]] |
| 645 | mountpoint·=·"/var/log/audit" | 643 | mountpoint·=·"/var/log/audit" |
| 646 | size·=·10737418240 | 644 | size·=·10737418240 |
| 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 646 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 647 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 648 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 649 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 652 | part·/var/log/audit | 650 | part·/var/log/audit |
| 651 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 652 | logvol·/var/log/audit·10240 | ||
| 653 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules | 653 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules |
| 654 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 654 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 655 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. | 655 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. |
| 656 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. | 656 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. |
| 657 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules | 657 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules |
| Offset 1535, 14 lines modified | Offset 1535, 25 lines modified | ||
| 1535 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1535 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1536 | ············_\x8c_\x8u_\x8i····3.4.5 | 1536 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1537 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1537 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1538 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1538 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1539 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1539 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1540 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1540 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1541 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1541 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1543 | [customizations.services] | ||
| Max diff block lines reached; 189380/196390 bytes (96.43%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038610:·7320·6f66·2032·3032·3 | 00038610:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16549, 234 lines modified | Offset 16549, 234 lines modified | ||
| 00040a40:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 00040a40:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 00040a50:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 00040a50:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 00040a60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00040a60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00040a70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00040a70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00040a80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00040a80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00040a90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00040a90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00040aa0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00040aa0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00040ab0:·6961·7469·6f6e·204 | 00040ab0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00040ac0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00040ad0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040ae0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040af0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 00040b00:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 00040b10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040b20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040b30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040b40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040 | 00040ac0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 00040ad0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040ae0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040af0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040b00:·2069·643d·2269·646d·3732·3733·223e·3c70···id="idm7273"><p | |||
| 00040b10:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00040b20:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 00040b30:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 00040b40:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 00040b50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00040b60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00040b70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040b80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040b90:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 00040ba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040bb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040bc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040bd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040be0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040bf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040c00:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| 00040c10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040c20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040c30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040c40:·2220·6964·3d22·6964·6d37·3237·3422·3e3c··"·id="idm7274">< | |||
| 00040c50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040c60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00040c70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00040c80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00040c90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00040ca0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00040cb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040cc0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00040 | 00040cd0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 00040 | 00040ce0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 00040cf0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00040d00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040d10:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00040d20:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00040d30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00040d40:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 00040d50:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 00040d60:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040d70:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040d80:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040d90:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040da0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040db0:·6d37·3237·3522·2074·6162·696e·6465·783d··m7275"·tabindex= | |||
| 00040dc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040dd0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040de0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040df0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040e00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040e10:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 00040e20:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040e30:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040e40:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040e50:·6964·3d22·6964·6d37·3237·3522·3e3c·7461··id="idm7275"><ta | |||
| 00040e60:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040e70:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040e80:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040e90:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040ea0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040 | 00040eb0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 00040 | 00040ec0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00040ed0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00040ba0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00040bb0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00040bc0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00040bd0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00040be0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00040bf0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00040c00:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 00040c10:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 00040c20:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 00040c30:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 00040c40:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 00040c50:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 00040c60:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00040c70:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00040c80:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00040c90:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00040ca0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00040cb0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 00040cc0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 00040cd0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 00040ce0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 00040cf0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 00040d00:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 00040d10:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00040d20:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00040d30:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00040d40:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00040d50:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| Max diff block lines reached; 2520707/2532077 bytes (99.55%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Base | 63 | ··············Base |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 436, 14 lines modified | Offset 436, 33 lines modified | ||
| 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ············_\x8c_\x8i_\x8s············6.1.1 | 441 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | [[packages]] | ||
| 445 | name·=·"aide" | ||
| 446 | version·=·"*" | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 452 | package·--add=aide | ||
| 453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 458 | package·install·aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 448 | -·name:·Ensure·aide·is·installed | 464 | -·name:·Ensure·aide·is·installed |
| 449 | ··package: | 465 | ··package: |
| Offset 457, 26 lines modified | Offset 476, 14 lines modified | ||
| 457 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 458 | ··-·enable_strategy | 477 | ··-·enable_strategy |
| 459 | ··-·low_complexity | 478 | ··-·low_complexity |
| 460 | ··-·low_disruption | 479 | ··-·low_disruption |
| 461 | ··-·medium_severity | 480 | ··-·medium_severity |
| 462 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 463 | ··-·package_aide_installed | 482 | ··-·package_aide_installed |
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 469 | package·install·aide | ||
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 471 | [[packages]] | ||
| 472 | name·=·"aide" | ||
| 473 | version·=·"*" | ||
| 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 479 | #·Remediation·is·applicable·only·in·certain·platforms | 488 | #·Remediation·is·applicable·only·in·certain·platforms |
| 480 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 489 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 496, 21 lines modified | Offset 503, 14 lines modified | ||
| 496 | include·install_aide | 503 | include·install_aide |
| 497 | class·install_aide·{ | 504 | class·install_aide·{ |
| 498 | ··package·{·'aide': | 505 | ··package·{·'aide': |
| 499 | ····ensure·=>·'installed', | 506 | ····ensure·=>·'installed', |
| 500 | ··} | 507 | ··} |
| 501 | } | 508 | } |
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 503 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 504 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 505 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 506 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 507 | package·--add=aide | ||
| 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 509 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 510 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 511 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 512 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 513 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ············_\x8i_\x8s_\x8m······1446 | 624 | ············_\x8i_\x8s_\x8m······1446 |
| 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 630 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 631 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 632 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 633 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 634 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 637 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 635 | ··set_fact: | 638 | ··set_fact: |
| Offset 725, 18 lines modified | Offset 729, 14 lines modified | ||
| 725 | ··-·NIST-800-53-SC-13 | 729 | ··-·NIST-800-53-SC-13 |
| 726 | ··-·enable_fips_mode | 730 | ··-·enable_fips_mode |
| 727 | ··-·high_severity | 731 | ··-·high_severity |
| 728 | ··-·medium_complexity | 732 | ··-·medium_complexity |
| 729 | ··-·medium_disruption | 733 | ··-·medium_disruption |
| 730 | ··-·reboot_required | 734 | ··-·reboot_required |
| 731 | ··-·restrict_strategy | 735 | ··-·restrict_strategy |
| 732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 212862/219235 bytes (97.09%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038650:·206f·6620·3230·323 | 00038650:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16553, 234 lines modified | Offset 16553, 234 lines modified | ||
| 00040a80:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 00040a80:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 00040a90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 00040a90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 00040aa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00040aa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00040ab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00040ab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00040ac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00040ac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00040ad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00040ad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00040ae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00040ae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00040af0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00040b00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040b10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040b20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040b30:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 00040b40:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00040b50:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040b60:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040b70:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040b80:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040b90:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040ba0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040 | 00040af0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 00040b00:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00040b10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040b20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040b30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040b40:·6964·3d22·6964·6d37·3237·3322·3e3c·7072··id="idm7273"><pr | |||
| 00040b50:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00040b60:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 00040b70:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 00040b80:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00040b90:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040ba0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040bb0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040bc0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040bd0:·6574·3d22·2369·646d·3732·3734·2220·7461··et="#idm7274"·ta | |||
| 00040be0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040bf0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040c00:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040c10:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040c20:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040c30:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040c40:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 00040c50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040c60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040c70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040c80:·2069·643d·2269·646d·3732·3734·223e·3c74···id="idm7274"><t | |||
| 00040c90:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00040ca0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00040cb0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00040cc0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00040cd0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00040 | 00040ce0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 00040cf0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040d00:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00040d10:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040d20:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00040d30:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00040 | 00040d40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00040d50:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00040d60:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00040d70:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00040d80:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 00040d90:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 00040da0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040db0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040dc0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040dd0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040be0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040bf0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040c00:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040c10:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040c20:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040c30:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00040c40:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 00040c50:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00040c60:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00040c70:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 00040c80:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 00040c90:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00040ca0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 00040cb0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00040cc0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00040cd0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00040ce0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 00040cf0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 00040d00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00040d10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00040d20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00040d30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00040d40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040d50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040d60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040d70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040d80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040d90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040da0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 00040db0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 00040dc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040dd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040de0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00040d | 00040de0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00040df0:·3732·3735·2220·7461·6269·6e64·6578·3d22··7275"·tabindex=" | |||
| 00040e00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040e10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040e20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040e30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040e40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040e50:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 00040e60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040e70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040e80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040e90:·643d·2269·646d·3732·3735·223e·3c74·6162··d="idm7275"><tab | |||
| Max diff block lines reached; 2499938/2532008 bytes (98.73%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ··············Secret | 64 | ··············Secret |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 437, 14 lines modified | Offset 437, 33 lines modified | ||
| 437 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 437 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 438 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 438 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 441 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 441 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 442 | ············_\x8c_\x8i_\x8s············6.1.1 | 442 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 443 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 443 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 445 | [[packages]] | ||
| 446 | name·=·"aide" | ||
| 447 | version·=·"*" | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 453 | package·--add=aide | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·install·aide | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 449 | -·name:·Ensure·aide·is·installed | 465 | -·name:·Ensure·aide·is·installed |
| 450 | ··package: | 466 | ··package: |
| Offset 458, 26 lines modified | Offset 477, 14 lines modified | ||
| 458 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 459 | ··-·enable_strategy | 478 | ··-·enable_strategy |
| 460 | ··-·low_complexity | 479 | ··-·low_complexity |
| 461 | ··-·low_disruption | 480 | ··-·low_disruption |
| 462 | ··-·medium_severity | 481 | ··-·medium_severity |
| 463 | ··-·no_reboot_needed | 482 | ··-·no_reboot_needed |
| 464 | ··-·package_aide_installed | 483 | ··-·package_aide_installed |
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 470 | package·install·aide | ||
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 472 | [[packages]] | ||
| 473 | name·=·"aide" | ||
| 474 | version·=·"*" | ||
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 485 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 486 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 487 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 488 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 480 | #·Remediation·is·applicable·only·in·certain·platforms | 489 | #·Remediation·is·applicable·only·in·certain·platforms |
| 481 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 490 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 497, 21 lines modified | Offset 504, 14 lines modified | ||
| 497 | include·install_aide | 504 | include·install_aide |
| 498 | class·install_aide·{ | 505 | class·install_aide·{ |
| 499 | ··package·{·'aide': | 506 | ··package·{·'aide': |
| 500 | ····ensure·=>·'installed', | 507 | ····ensure·=>·'installed', |
| 501 | ··} | 508 | ··} |
| 502 | } | 509 | } |
| 503 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 504 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 505 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 506 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 507 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 508 | package·--add=aide | ||
| 509 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 510 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 510 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 511 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 511 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 512 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 512 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 513 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 513 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 514 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 623, 14 lines modified | Offset 623, 18 lines modified | ||
| 623 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 623 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 624 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 624 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 625 | ············_\x8i_\x8s_\x8m······1446 | 625 | ············_\x8i_\x8s_\x8m······1446 |
| 626 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 626 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 627 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 627 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 628 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 628 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 631 | [customizations] | ||
| 632 | fips·=·true | ||
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 634 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 635 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 636 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 637 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 635 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 638 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 636 | ··set_fact: | 639 | ··set_fact: |
| Offset 726, 18 lines modified | Offset 730, 14 lines modified | ||
| 726 | ··-·NIST-800-53-SC-13 | 730 | ··-·NIST-800-53-SC-13 |
| 727 | ··-·enable_fips_mode | 731 | ··-·enable_fips_mode |
| 728 | ··-·high_severity | 732 | ··-·high_severity |
| 729 | ··-·medium_complexity | 733 | ··-·medium_complexity |
| 730 | ··-·medium_disruption | 734 | ··-·medium_disruption |
| 731 | ··-·reboot_required | 735 | ··-·reboot_required |
| 732 | ··-·restrict_strategy | 736 | ··-·restrict_strategy |
| 733 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 212862/219244 bytes (97.09%) of diff not shown. | |||
| Offset 14428, 16 lines modified | Offset 14428, 16 lines modified | ||
| 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038620:·2020·2020·2028·6173·206f·6620·3230·323 | 00038620:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038630:·2d31·3 | 00038630:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16550, 234 lines modified | Offset 16550, 234 lines modified | ||
| 00040a50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040a50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040a60:·3d22·2369·646d·3732·3733·2220·7461·6269··="#idm7273"·tabi | 00040a60:·3d22·2369·646d·3732·3733·2220·7461·6269··="#idm7273"·tabi | ||
| 00040a70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00040a70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00040a80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00040a80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00040a90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00040a90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00040aa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00040aa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00040ab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00040ab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00040ac0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00040ac0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00040ad0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00040ad0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00040ae0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040af0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040b00:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040b10:·3d22·6964·6d37·3237·3322·3e3c·7461·626c··="idm7273"><tabl | |||
| 00040b20:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040b30:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040b40:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040b50:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040b60:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040b70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040b80:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040b90:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040ba0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040bb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040bc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040bd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040be0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040bf0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040c00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040c10:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00040c20:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00040c30:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00040c40:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00040c50:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00040c60:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 00040c70:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00040c80:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00040c90:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00040ca0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00040cb0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00040cc0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 00040cd0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 00040ce0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 00040cf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 00040d00:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 00040d10:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 00040d20:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00040d30:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00040d40:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00040d50:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00040d60:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00040d70:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00040d80:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 00040d90:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00040da0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040db0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040dc0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040dd0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040de0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00040df0:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 00040e00:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00040e10:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00040e20:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00040e30:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00040e40:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00040e50:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 00040e60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040e70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040e80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040e90:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 00040ea0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040eb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040ec0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040ed0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040ee0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040ef0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040f00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040f10:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040f20:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040f30:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040f40:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040f50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040f60:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040f70:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040f80:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040f90:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 00040fa0:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 00040fb0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040fc0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040fd0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040fe0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040ff0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00041000:·3237·3522·2074·6162·696e·6465·783d·2230··275"·tabindex="0 | |||
| 00041010:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00041020:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00041030:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00041040:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00041050:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00041060:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 00041070:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00041080:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00041090:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000410a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000410b0:·2069·643d·2269·646d·3732·3735·223e·3c70···id="idm7275"><p | |||
| 000410c0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 000410d0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 000410e0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 000410f0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 00041100:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00041110:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| Max diff block lines reached; 2500076/2532284 bytes (98.73%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Top·Secret | 63 | ··············Top·Secret |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 436, 14 lines modified | Offset 436, 33 lines modified | ||
| 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ············_\x8c_\x8i_\x8s············6.1.1 | 441 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | [[packages]] | ||
| 445 | name·=·"aide" | ||
| 446 | version·=·"*" | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 452 | package·--add=aide | ||
| 453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 458 | package·install·aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 448 | -·name:·Ensure·aide·is·installed | 464 | -·name:·Ensure·aide·is·installed |
| 449 | ··package: | 465 | ··package: |
| Offset 457, 26 lines modified | Offset 476, 14 lines modified | ||
| 457 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 458 | ··-·enable_strategy | 477 | ··-·enable_strategy |
| 459 | ··-·low_complexity | 478 | ··-·low_complexity |
| 460 | ··-·low_disruption | 479 | ··-·low_disruption |
| 461 | ··-·medium_severity | 480 | ··-·medium_severity |
| 462 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 463 | ··-·package_aide_installed | 482 | ··-·package_aide_installed |
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 469 | package·install·aide | ||
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 471 | [[packages]] | ||
| 472 | name·=·"aide" | ||
| 473 | version·=·"*" | ||
| 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 479 | #·Remediation·is·applicable·only·in·certain·platforms | 488 | #·Remediation·is·applicable·only·in·certain·platforms |
| 480 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 489 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 496, 21 lines modified | Offset 503, 14 lines modified | ||
| 496 | include·install_aide | 503 | include·install_aide |
| 497 | class·install_aide·{ | 504 | class·install_aide·{ |
| 498 | ··package·{·'aide': | 505 | ··package·{·'aide': |
| 499 | ····ensure·=>·'installed', | 506 | ····ensure·=>·'installed', |
| 500 | ··} | 507 | ··} |
| 501 | } | 508 | } |
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 503 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 504 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 505 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 506 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 507 | package·--add=aide | ||
| 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 509 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 510 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 511 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 512 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 513 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ············_\x8i_\x8s_\x8m······1446 | 624 | ············_\x8i_\x8s_\x8m······1446 |
| 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 630 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 631 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 632 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 633 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 634 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 637 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 635 | ··set_fact: | 638 | ··set_fact: |
| Offset 725, 18 lines modified | Offset 729, 14 lines modified | ||
| 725 | ··-·NIST-800-53-SC-13 | 729 | ··-·NIST-800-53-SC-13 |
| 726 | ··-·enable_fips_mode | 730 | ··-·enable_fips_mode |
| 727 | ··-·high_severity | 731 | ··-·high_severity |
| 728 | ··-·medium_complexity | 732 | ··-·medium_complexity |
| 729 | ··-·medium_disruption | 733 | ··-·medium_disruption |
| 730 | ··-·reboot_required | 734 | ··-·reboot_required |
| 731 | ··-·restrict_strategy | 735 | ··-·restrict_strategy |
| 732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 212862/219252 bytes (97.09%) of diff not shown. | |||
| Offset 14421, 15 lines modified | Offset 14421, 15 lines modified | ||
| 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385b0:·3230·323 | 000385b0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16532, 233 lines modified | Offset 16532, 233 lines modified | ||
| 00040930:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 00040930:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 00040940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00040940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00040950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00040960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00040970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00040980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 00040990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00040990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000409a0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 000409b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 000409c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000409d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000409e0:·2069·643d·2269·646d·3732·3733·223e·3c74···id="idm7273"><t | |||
| 000409f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00040a00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00040a10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00040a20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00040 | 000409a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 000409b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 000409c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000409d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000409e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000409f0:·646d·3732·3733·223e·3c70·7265·3e3c·636f··dm7273"><pre><co | |||
| 00040a00:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 00040a10:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 00040a20:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00040a30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00040a40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00040a50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00040a60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00040a70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00040a80:·6964·6d37·3237·3422·2074·6162·696e·6465··idm7274"·tabinde | |||
| 00040a90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00040aa0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00040ab0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00040ac0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00040ad0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00040ae0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 00040af0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 00040b00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040b10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040b20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040b30:·6964·6d37·3237·3422·3e3c·7461·626c·6520··idm7274"><table· | |||
| 00040b40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00040b50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00040b60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00040b70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00040b80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00040b90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040ba0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00040bb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040bc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040bd0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040be0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040bf0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040 | 00040c00:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 00040a50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040 | 00040c10:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 00040c20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040c30:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 00040c40:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 00040c50:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040c60:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040c70:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040c80:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040c90:·6172·6765·743d·2223·6964·6d37·3237·3522··arget="#idm7275" | |||
| 00040ca0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040cb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040cc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00040cd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00040ce0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00040cf0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040d00:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 00040d10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00040d20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00040d30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00040d40:·6d37·3237·3522·3e3c·7461·626c·6520·636c··m7275"><table·cl | |||
| 00040d50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00040d60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00040d70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00040d80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00040d90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00040 | 00040da0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 00040db0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00040a80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00040a90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00040aa0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040ab0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00040ac0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00040ad0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00040ae0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 00040af0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 00040b00:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 00040b10:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 00040b20:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 00040b30:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 00040b40:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 00040b50:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 00040b60:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 00040b70:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 00040b80:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 00040b90:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 00040ba0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 00040bb0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 00040bc0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 00040bd0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 00040be0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 00040bf0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 00040c00:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 00040c10:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 00040c20:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 00040c30:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| Max diff block lines reached; 2842862/2874794 bytes (98.89%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | ··············Linux·10 | 62 | ··············Linux·10 |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:10 | 65 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 66 | ····*·cpe:/o:centos:centos:10 | 66 | ····*·cpe:/o:centos:centos:10 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 433, 14 lines modified | Offset 433, 33 lines modified | ||
| 433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 435 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 435 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 437 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 437 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 438 | ············_\x8c_\x8i_\x8s············6.1.1 | 438 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | [[packages]] | ||
| 442 | name·=·"aide" | ||
| 443 | version·=·"*" | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 449 | package·--add=aide | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 455 | package·install·aide | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 445 | -·name:·Ensure·aide·is·installed | 461 | -·name:·Ensure·aide·is·installed |
| 446 | ··package: | 462 | ··package: |
| Offset 454, 26 lines modified | Offset 473, 14 lines modified | ||
| 454 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 455 | ··-·enable_strategy | 474 | ··-·enable_strategy |
| 456 | ··-·low_complexity | 475 | ··-·low_complexity |
| 457 | ··-·low_disruption | 476 | ··-·low_disruption |
| 458 | ··-·medium_severity | 477 | ··-·medium_severity |
| 459 | ··-·no_reboot_needed | 478 | ··-·no_reboot_needed |
| 460 | ··-·package_aide_installed | 479 | ··-·package_aide_installed |
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 462 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 463 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 464 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 465 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 466 | package·install·aide | ||
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | [[packages]] | ||
| 469 | name·=·"aide" | ||
| 470 | version·=·"*" | ||
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 476 | #·Remediation·is·applicable·only·in·certain·platforms | 485 | #·Remediation·is·applicable·only·in·certain·platforms |
| 477 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 493, 21 lines modified | Offset 500, 14 lines modified | ||
| 493 | include·install_aide | 500 | include·install_aide |
| 494 | class·install_aide·{ | 501 | class·install_aide·{ |
| 495 | ··package·{·'aide': | 502 | ··package·{·'aide': |
| 496 | ····ensure·=>·'installed', | 503 | ····ensure·=>·'installed', |
| 497 | ··} | 504 | ··} |
| 498 | } | 505 | } |
| 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 504 | package·--add=aide | ||
| 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 506 | Run·the·following·command·to·generate·a·new·database: | 507 | Run·the·following·command·to·generate·a·new·database: |
| 507 | $·sudo·/usr/sbin/aide·--init | 508 | $·sudo·/usr/sbin/aide·--init |
| 508 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 509 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 509 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 510 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 510 | To·initiate·a·manual·check,·run·the·following·command: | 511 | To·initiate·a·manual·check,·run·the·following·command: |
| 511 | $·sudo·/usr/sbin/aide·--check | 512 | $·sudo·/usr/sbin/aide·--check |
| Offset 844, 14 lines modified | Offset 844, 33 lines modified | ||
| 844 | ··-·PCI-DSSv4-2.2.7 | 844 | ··-·PCI-DSSv4-2.2.7 |
| 845 | ··-·configure_crypto_policy | 845 | ··-·configure_crypto_policy |
| 846 | ··-·high_severity | 846 | ··-·high_severity |
| 847 | ··-·low_complexity | 847 | ··-·low_complexity |
| 848 | ··-·low_disruption | 848 | ··-·low_disruption |
| 849 | ··-·no_reboot_needed | 849 | ··-·no_reboot_needed |
| 850 | ··-·restrict_strategy | 850 | ··-·restrict_strategy |
| 851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 852 | var_system_crypto_policy='DEFAULT' | ||
| 853 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 854 | rc=$? | ||
| 855 | if·test·"$rc"·=·127;·then | ||
| 856 | » echo·"$stderr_of_call"·>&2 | ||
| 857 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 858 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 859 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 860 | » false··#·end·with·an·error·code | ||
| 861 | elif·test·"$rc"·!=·0;·then | ||
| 862 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 863 | » false··#·end·with·an·error·code | ||
| 864 | fi | ||
| 851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 852 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 222280/227809 bytes (97.57%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038560:·206f·6620·3230·323 | 00038560:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | ||
| 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b730:·6469·6174·696f·6e20·4 | 0003b730:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b740:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b750:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b760:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b770:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b780:·3237·3322·3e3c·7461·626c·6520·636c·6173··273"><table·clas | |||
| 0003b790:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b7a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b7b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b7c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b7 | 0003b740:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b750:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b760:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b770:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b780:·2220·6964·3d22·6964·6d37·3237·3322·3e3c··"·id="idm7273">< | |||
| 0003b790:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b7a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b7b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b7c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b7d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b7e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b7f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b800:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b810:·7267·6574·3d22·2369·646d·3732·3734·2220··rget="#idm7274"· | |||
| 0003b820:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b830:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b840:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b850:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b860:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b870:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b880:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 0003b890:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | |||
| 0003b8d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b8e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b8f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b900:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b910:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b920:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b930:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b940:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b7e | 0003b950:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b960:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b970:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b980:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b990:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b9a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b9b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b9c0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b9d0:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003b9e0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b9f0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba00:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ba10:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ba20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ba30:·646d·3732·3735·2220·7461·6269·6e64·6578··dm7275"·tabindex | |||
| 0003ba40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003ba50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003ba60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003ba70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003ba80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003ba90:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003baa0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bab0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bac0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bad0:·2069·643d·2269·646d·3732·3735·223e·3c74···id="idm7275"><t | |||
| 0003bae0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003baf0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bb00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bb10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bb20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003bb30:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003bb40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bb50:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b820:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b830:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b840:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b850:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b860:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b870:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b880:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b890:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b8a0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b8b0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b8c0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b8d0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b8e0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b8f0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b900:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b910:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b920:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b940:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b950:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b960:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b970:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b980:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b990:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b9a0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b9b0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b9c0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b9d0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| Max diff block lines reached; 5361868/5373238 bytes (99.79%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:10 | 62 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 63 | ····*·cpe:/o:centos:centos:10 | 63 | ····*·cpe:/o:centos:centos:10 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 143, 26 lines modified | Offset 162, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 164 | ··-·low_complexity |
| 146 | ··-·low_disruption | 165 | ··-·low_disruption |
| 147 | ··-·medium_severity | 166 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 189, 14 lines modified | ||
| 182 | include·install_aide | 189 | include·install_aide |
| 183 | class·install_aide·{ | 190 | class·install_aide·{ |
| 184 | ··package·{·'aide': | 191 | ··package·{·'aide': |
| 185 | ····ensure·=>·'installed', | 192 | ····ensure·=>·'installed', |
| 186 | ··} | 193 | ··} |
| 187 | } | 194 | } |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 196 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 196 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 197 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 197 | Severity: ··medium | 198 | Severity: ··medium |
| 198 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 199 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 199 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 200 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 200 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 201 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1668, 14 lines modified | Offset 1668, 18 lines modified | ||
| 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1670 | ············_\x8i_\x8s_\x8m······1446 | 1670 | ············_\x8i_\x8s_\x8m······1446 |
| 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1676 | [customizations] | ||
| 1677 | fips·=·true | ||
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1676 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1679 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1677 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1680 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1678 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1681 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1679 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1682 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1680 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1683 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1681 | ··set_fact: | 1684 | ··set_fact: |
| Offset 1771, 18 lines modified | Offset 1775, 14 lines modified | ||
| 1771 | ··-·NIST-800-53-SC-13 | 1775 | ··-·NIST-800-53-SC-13 |
| 1772 | ··-·enable_fips_mode | 1776 | ··-·enable_fips_mode |
| 1773 | ··-·high_severity | 1777 | ··-·high_severity |
| 1774 | ··-·medium_complexity | 1778 | ··-·medium_complexity |
| 1775 | ··-·medium_disruption | 1779 | ··-·medium_disruption |
| 1776 | ··-·reboot_required | 1780 | ··-·reboot_required |
| 1777 | ··-·restrict_strategy | 1781 | ··-·restrict_strategy |
| 1778 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 497976/504662 bytes (98.68%) of diff not shown. | |||
| Offset 14416, 16 lines modified | Offset 14416, 16 lines modified | ||
| 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038560:·2028·6173·206f·6620·3230·323 | 00038560:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00038570:·3 | 00038570:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b730:·5265·6d65·6469·6174·696f·6e20·4 | 0003b730:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b740:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b750:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b760:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b770:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b780:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b790:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b7a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b7b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b7c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b7d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b7e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b7f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003b740:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b750:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b760:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b770:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b780:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b790:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0003b7a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b7b0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b7c0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b7d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b7e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b7f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b800:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b820:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b880:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b890:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b8a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b8b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b8c0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b8d0:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 0003b8e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b8f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b900:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b910:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b920:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b930:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b820:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b940:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b950:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b960:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b970:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b980:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b990:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b9a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b9b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b9c0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b9d0:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b9e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b9f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ba00:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba10:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba30:·3d22·2369·646d·3732·3735·2220·7461·6269··="#idm7275"·tabi | |||
| 0003ba40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ba50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ba60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ba70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ba80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ba90:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003baa0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bab0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bac0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bad0:·7073·6522·2069·643d·2269·646d·3732·3735··pse"·id="idm7275 | |||
| 0003bae0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003baf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bb00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bb10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bb20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003bb30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b860:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b870:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b880:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b890:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b8a0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b8b0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b8c0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b8d0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b8e0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b8f0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b900:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b910:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b920:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b930:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b940:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b950:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b960:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b970:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b980:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b990:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b9a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b9b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b9c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b9d0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b9e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| Max diff block lines reached; 5283769/5315977 bytes (99.39%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:10 | 62 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 63 | ····*·cpe:/o:centos:centos:10 | 63 | ····*·cpe:/o:centos:centos:10 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 143, 26 lines modified | Offset 162, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 164 | ··-·low_complexity |
| 146 | ··-·low_disruption | 165 | ··-·low_disruption |
| 147 | ··-·medium_severity | 166 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 189, 14 lines modified | ||
| 182 | include·install_aide | 189 | include·install_aide |
| 183 | class·install_aide·{ | 190 | class·install_aide·{ |
| 184 | ··package·{·'aide': | 191 | ··package·{·'aide': |
| 185 | ····ensure·=>·'installed', | 192 | ····ensure·=>·'installed', |
| 186 | ··} | 193 | ··} |
| 187 | } | 194 | } |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 196 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 196 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 197 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 197 | Severity: ··medium | 198 | Severity: ··medium |
| 198 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 199 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 199 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 200 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 200 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 201 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1668, 14 lines modified | Offset 1668, 18 lines modified | ||
| 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1670 | ············_\x8i_\x8s_\x8m······1446 | 1670 | ············_\x8i_\x8s_\x8m······1446 |
| 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1676 | [customizations] | ||
| 1677 | fips·=·true | ||
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1676 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1679 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1677 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1680 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1678 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1681 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1679 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1682 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1680 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1683 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1681 | ··set_fact: | 1684 | ··set_fact: |
| Offset 1771, 18 lines modified | Offset 1775, 14 lines modified | ||
| 1771 | ··-·NIST-800-53-SC-13 | 1775 | ··-·NIST-800-53-SC-13 |
| 1772 | ··-·enable_fips_mode | 1776 | ··-·enable_fips_mode |
| 1773 | ··-·high_severity | 1777 | ··-·high_severity |
| 1774 | ··-·medium_complexity | 1778 | ··-·medium_complexity |
| 1775 | ··-·medium_disruption | 1779 | ··-·medium_disruption |
| 1776 | ··-·reboot_required | 1780 | ··-·reboot_required |
| 1777 | ··-·restrict_strategy | 1781 | ··-·restrict_strategy |
| 1778 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 492148/498838 bytes (98.66%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038640:·6620·3230·323 | 00038640:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15182, 236 lines modified | Offset 15182, 236 lines modified | ||
| 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b540:·6564·6961·7469·6f6e·204 | 0003b540:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b550:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b560:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b570:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b580:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b590:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b550:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b560:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b570:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b580:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b590:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b5a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b5d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b5e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b5f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b600:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b610:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b620:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b630:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b640:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b650:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b660:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b670:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b680:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b690:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b6a0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b6b0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b6c0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b6d0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b6e0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b6f0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b700:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b710:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b720:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b730:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b740:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b750:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b760:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b770:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b780:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b790:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b7a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b7b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b7c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b7d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b7e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b7f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b800:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b810:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b820:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b830:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b840:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b850:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b860:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b870:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b880:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003b890:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b8a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b8b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b8c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b8d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b8e0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b8f0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b900:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b910:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b920:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b930:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b940:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b950:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b960:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b970:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b980:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b990:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b9a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b9b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b9c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b9d0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b9e0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b9f0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ba00:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003ba10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003b5a0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003b5b0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b5c0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003ba30:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003ba40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ba50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ba60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba90:·743d·2223·6964·6d38·3433·3022·2074·6162··t="#idm8430"·tab | |||
| 0003baa0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bab0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bac0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bad0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bae0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003baf0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003bb00:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003bb10:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bb20:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bb30:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bb40:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| Max diff block lines reached; 3964684/3997030 bytes (99.19%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 141, 26 lines modified | Offset 160, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 162 | ··-·low_complexity |
| 144 | ··-·low_disruption | 163 | ··-·low_disruption |
| 145 | ··-·medium_severity | 164 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 187, 14 lines modified | ||
| 180 | include·install_aide | 187 | include·install_aide |
| 181 | class·install_aide·{ | 188 | class·install_aide·{ |
| 182 | ··package·{·'aide': | 189 | ··package·{·'aide': |
| 183 | ····ensure·=>·'installed', | 190 | ····ensure·=>·'installed', |
| 184 | ··} | 191 | ··} |
| 185 | } | 192 | } |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 328, 50 lines modified | Offset 328, 50 lines modified | ||
| 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 329 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 329 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 330 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 330 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 331 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 331 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 332 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 332 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 333 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 333 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 334 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 334 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 336 | logvol·/home·1024 | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | [[customizations.filesystem]] | 336 | [[customizations.filesystem]] |
| 339 | mountpoint·=·"/home" | 337 | mountpoint·=·"/home" |
| 340 | size·=·1073741824 | 338 | size·=·1073741824 |
| 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 340 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 341 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 342 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 343 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 346 | part·/home | 344 | part·/home |
| 345 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 346 | logvol·/home·1024 | ||
| 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 348 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 348 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 349 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 349 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 249169/255617 bytes (97.48%) of diff not shown. | |||
| Offset 14429, 15 lines modified | Offset 14429, 15 lines modified | ||
| 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038630:·6620·3230·323 | 00038630:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15187, 236 lines modified | Offset 15187, 236 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b5a0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b5b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b5d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5e0:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b5f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b600:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b610:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b620:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b630:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b640:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b650:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b660:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b670:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b680:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b690:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b6a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b6b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b6c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b6d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6e0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b6f0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b700:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b710:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b720:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b730:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b740:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b750:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b760:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b770:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b780:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b790:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b7a0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b7b0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b7c0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b7d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b7e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b7f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b800:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b810:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b820:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b830:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b840:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b850:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b860:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b870:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b880:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b890:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b8a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b8b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b8c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b8d0:·7267·6574·3d22·2369·646d·3834·3239·2220··rget="#idm8429"· | |||
| 0003b8e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b8f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b900:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b910:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b920:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b930:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b940:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b950:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b960:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b970:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b980:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 0003b990:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b9a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b9b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b9c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b9d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b9e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b9f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ba00:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ba10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ba20:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ba30:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003ba40:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ba50:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ba60:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003ba70:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003ba80:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 0003ba90:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003baa0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bab0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bac0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bad0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bae0:·7267·6574·3d22·2369·646d·3834·3330·2220··rget="#idm8430"· | |||
| 0003baf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bb30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bb40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bb50:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bb60:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bb70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bb80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bb90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bba0:·6964·6d38·3433·3022·3e3c·7072·653e·3c63··idm8430"><pre><c | |||
| 0003bbb0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003bbc0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bbd0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bbe0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bbf0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc00:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| Max diff block lines reached; 4057739/4090085 bytes (99.21%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8c_\x8i_\x8s············6.1.1 | 124 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 149 | ··package: |
| Offset 142, 26 lines modified | Offset 161, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 163 | ··-·low_complexity |
| 145 | ··-·low_disruption | 164 | ··-·low_disruption |
| 146 | ··-·medium_severity | 165 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 188, 14 lines modified | ||
| 181 | include·install_aide | 188 | include·install_aide |
| 182 | class·install_aide·{ | 189 | class·install_aide·{ |
| 183 | ··package·{·'aide': | 190 | ··package·{·'aide': |
| 184 | ····ensure·=>·'installed', | 191 | ····ensure·=>·'installed', |
| 185 | ··} | 192 | ··} |
| 186 | } | 193 | } |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 812, 50 lines modified | Offset 812, 50 lines modified | ||
| 812 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 812 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 813 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 813 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 814 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 814 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 815 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 815 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 816 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 816 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 817 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 817 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 818 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 818 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 820 | logvol·/home·1024 | ||
| 821 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 822 | [[customizations.filesystem]] | 820 | [[customizations.filesystem]] |
| 823 | mountpoint·=·"/home" | 821 | mountpoint·=·"/home" |
| 824 | size·=·1073741824 | 822 | size·=·1073741824 |
| 825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 826 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 824 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 827 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 825 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 828 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 826 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 829 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 827 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 830 | part·/home | 828 | part·/home |
| 829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 830 | logvol·/home·1024 | ||
| 831 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 831 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 832 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 832 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 833 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 833 | Rationale:··Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 258282/264677 bytes (97.58%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038650:·6620·3230·323 | 00038650:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15178, 235 lines modified | Offset 15178, 235 lines modified | ||
| 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | ||
| 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b500:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b510:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b520:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b530:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b540:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b550:·6964·3d22·6964·6d38·3432·3822·3e3c·7072··id="idm8428"><pr | |||
| 0003b500:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b510:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b520:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b530:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b540:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b550:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b560:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b570:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b580:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b590:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b5b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b5d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b5e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b5f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b600:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b610:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b620:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b630:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b640:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b650:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b660:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b670:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b680:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b690:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b6a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b6b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b6c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b6d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b6e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b6f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b700:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b710:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b720:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b730:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b740:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b750:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b760:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b770:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b780:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b790:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b7a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b7b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b7c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b7d0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b7e0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b7f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b800:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b810:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b820:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b830:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b840:·2369·646d·3834·3239·2220·7461·6269·6e64··#idm8429"·tabind | |||
| 0003b850:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b860:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b870:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b880:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b890:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b8a0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b8b0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8e0:·6522·2069·643d·2269·646d·3834·3239·223e··e"·id="idm8429"> | |||
| 0003b8f0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b900:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b910:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b920:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b930:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b940:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b950:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b960:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b970:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b980:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b990:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b9a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b9b0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b9c0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b9d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b | 0003b560:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 0003b570:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b580:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b9f0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003ba00:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ba10:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ba20:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003ba30:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ba40:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003ba50:·2369·646d·3834·3330·2220·7461·6269·6e64··#idm8430"·tabind | |||
| 0003ba60:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ba70:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ba80:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ba90:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003baa0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bab0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003bac0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003bad0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bae0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003baf0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| Max diff block lines reached; 2563610/2595818 bytes (98.76%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 14 lines modified | Offset 135, 33 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·--add=aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 163 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 164 | ··package: |
| Offset 157, 26 lines modified | Offset 176, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 176 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 177 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 178 | ··-·low_complexity |
| 160 | ··-·low_disruption | 179 | ··-·low_disruption |
| 161 | ··-·medium_severity | 180 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | 188 | #·Remediation·is·applicable·only·in·certain·platforms |
| 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 189 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 196, 21 lines modified | Offset 203, 14 lines modified | ||
| 196 | include·install_aide | 203 | include·install_aide |
| 197 | class·install_aide·{ | 204 | class·install_aide·{ |
| 198 | ··package·{·'aide': | 205 | ··package·{·'aide': |
| 199 | ····ensure·=>·'installed', | 206 | ····ensure·=>·'installed', |
| 200 | ··} | 207 | ··} |
| 201 | } | 208 | } |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 207 | package·--add=aide | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Run·the·following·command·to·generate·a·new·database: | 210 | Run·the·following·command·to·generate·a·new·database: |
| 210 | $·sudo·/usr/sbin/aide·--init | 211 | $·sudo·/usr/sbin/aide·--init |
| 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 212 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 213 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 213 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 214 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 214 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 215 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 367, 56 lines modified | Offset 367, 56 lines modified | ||
| 367 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 367 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 368 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 368 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 369 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 369 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 370 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 370 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 371 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 371 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 372 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 372 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | logvol·/home·1024 | ||
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 377 | [[customizations.filesystem]] | 375 | [[customizations.filesystem]] |
| 378 | mountpoint·=·"/home" | 376 | mountpoint·=·"/home" |
| 379 | size·=·1073741824 | 377 | size·=·1073741824 |
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 385 | part·/home | 383 | part·/home |
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | logvol·/home·1024 | ||
| 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 387 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 387 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 388 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 388 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| Max diff block lines reached; 174027/180018 bytes (96.67%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038640:·323 | 00038640:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14849, 217 lines modified | Offset 14849, 217 lines modified | ||
| 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | ||
| 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a070:·6564·6961·7469·6f6e·204 | 0003a070:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003a080:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003a090:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003a080:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a090:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a0a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a0b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a0c0:·3132·3538·3922·3e3c·7461·626c·6520·636c··12589"><table·cl | |||
| 0003a0d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a0e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a0f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a100:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a110:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a120:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a130:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a140:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003a150:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a160:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003a170:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003a180:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a190:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003a1a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003a1b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003a1c0:·206e·616d·653a·2045·6e73·7572·6520·646e···name:·Ensure·dn | |||
| 0003a1d0:·662d·6175·746f·6d61·7469·6320·6973·2069··f-automatic·is·i | |||
| 0003a1e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003a1f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·646e··ge:.····name:·dn | |||
| 0003a200:·662d·6175·746f·6d61·7469·630a·2020·2020··f-automatic.···· | |||
| 0003a210:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003a220:·2074·6167·733a·0a20·202d·2065·6e61·626c···tags:.··-·enabl | |||
| 0003a230:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003a240:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003a250:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003a260:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003a270:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003a280:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003a290:·636b·6167·655f·646e·662d·6175·746f·6d61··ckage_dnf-automa | |||
| 0003a2a0:·7469·635f·696e·7374·616c·6c65·640a·3c2f··tic_installed.</ | |||
| 0003a2b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003a2c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003a2d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003a2e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003a2f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003a300:·2369·646d·3132·3539·3022·2074·6162·696e··#idm12590"·tabin | |||
| 0003a310:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003a320:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003a330:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003a340:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003a350:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003a360:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003a370:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003a380:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a390:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a3a0:·7365·2220·6964·3d22·6964·6d31·3235·3930··se"·id="idm12590 | |||
| 0003a3b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003a3c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003a3d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003a3e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003a3f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a400:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003a410:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a420:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a430:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a440:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003a450:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a460:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003a470:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003a480:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003a490:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a4a0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003a4b0:·6765·2069·6e73·7461·6c6c·2064·6e66·2d61··ge·install·dnf-a | |||
| 0003a4c0:·7574·6f6d·6174·6963·0a3c·2f63·6f64·653e··utomatic.</code> | |||
| 0003a4d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a4e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a4f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a500:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a510:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a520:·3235·3931·2220·7461·6269·6e64·6578·3d22··2591"·tabindex=" | |||
| 0003a530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a580:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003a590:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003a5a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a | 0003a0a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003a0b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a0c0:·6522·2069·643d·2269·646d·3132·3538·3922··e"·id="idm12589" | |||
| 0003a5c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a5d0:·2220·6964·3d22·6964·6d31·3235·3931·223e··"·id="idm12591"> | |||
| 0003a5e0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003a5f0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003a600:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | |||
| 0003a610:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003a620:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003a630:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003a640:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003a650:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003a660:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003a670:·2369·646d·3132·3539·3222·2074·6162·696e··#idm12592"·tabin | |||
| 0003a680:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003a690:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003a6a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| Max diff block lines reached; 369928/399652 bytes (92.56%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 100, 14 lines modified | Offset 100, 33 lines modified | ||
| 100 | $·sudo·dnf·install·dnf-automatic | 100 | $·sudo·dnf·install·dnf-automatic |
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | [[packages]] | ||
| 109 | name·=·"dnf-automatic" | ||
| 110 | version·=·"*" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package·--add=dnf-automatic | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·install·dnf-automatic | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | -·name:·Ensure·dnf-automatic·is·installed | 128 | -·name:·Ensure·dnf-automatic·is·installed |
| 113 | ··package: | 129 | ··package: |
| Offset 116, 26 lines modified | Offset 135, 14 lines modified | ||
| 116 | ··tags: | 135 | ··tags: |
| 117 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 118 | ··-·low_complexity | 137 | ··-·low_complexity |
| 119 | ··-·low_disruption | 138 | ··-·low_disruption |
| 120 | ··-·medium_severity | 139 | ··-·medium_severity |
| 121 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 122 | ··-·package_dnf-automatic_installed | 141 | ··-·package_dnf-automatic_installed |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·install·dnf-automatic | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 147 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 149, 21 lines modified | Offset 156, 14 lines modified | ||
| 149 | include·install_dnf-automatic | 156 | include·install_dnf-automatic |
| 150 | class·install_dnf-automatic·{ | 157 | class·install_dnf-automatic·{ |
| 151 | ··package·{·'dnf-automatic': | 158 | ··package·{·'dnf-automatic': |
| 152 | ····ensure·=>·'installed', | 159 | ····ensure·=>·'installed', |
| 153 | ··} | 160 | ··} |
| 154 | } | 161 | } |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·--add=dnf-automatic | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 163 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 164 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 164 | automatic.conf. | 165 | automatic.conf. |
| 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 166 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 167 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 168 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9474, 14 lines modified | Offset 9474, 28 lines modified | ||
| 9474 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9474 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9475 | ···························A.9.1.2 | 9475 | ···························A.9.1.2 |
| 9476 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9476 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9477 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9477 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9478 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9478 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9479 | ············_\x8c_\x8i_\x8s············2.1.3 | 9479 | ············_\x8c_\x8i_\x8s············2.1.3 |
| 9480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9486 | package·--remove=dhcp-server | ||
| 9487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9492 | package·remove·dhcp-server | ||
| 9481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9486 | -·name:·Ensure·dhcp-server·is·removed | 9498 | -·name:·Ensure·dhcp-server·is·removed |
| 9487 | ··package: | 9499 | ··package: |
| Max diff block lines reached; 36105/41750 bytes (86.48%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038560:·7320·6f66·2032·3032·3 | 00038560:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15345, 130 lines modified | Offset 15345, 130 lines modified | ||
| 0003bf00:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bf00:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bf10:·6964·6d39·3138·3922·2074·6162·696e·6465··idm9189"·tabinde | 0003bf10:·6964·6d39·3138·3922·2074·6162·696e·6465··idm9189"·tabinde | ||
| 0003bf20:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bf20:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bf30:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bf30:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bf40:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bf40:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bf50:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bf50:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bf60:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bf60:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bf70:·656d·6564·6961·7469·6f6e·20 | 0003bf70:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003bf80:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003bf90:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bfa0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfb0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003bfc0:·3138·3922·3e3c·7072·653e·3c63·6f64·653e··189"><pre><code> | |||
| 0003bfd0:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bfe0:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | |||
| 0003bff0:·2074·6974·6c65·3d22·6672·6f6d·2050·726f···title="from·Pro | |||
| 0003c000:·6669·6c65·2f72·6566·696e·652d·7661·6c75··file/refine-valu | |||
| 0003c010:·653a·2078·6363·6466·5f6f·7267·2e73·7367··e:·xccdf_org.ssg | |||
| 0003c020:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | |||
| 0003c030:·7661·6c75·655f·7661·725f·7379·7374·656d··value_var_system | |||
| 0003c040:·5f63·7279·7074·6f5f·706f·6c69·6379·223e··_crypto_policy"> | |||
| 0003c050:·4445·4641·554c·543c·2f61·6262·723e·270a··DEFAULT</abbr>'. | |||
| 0003c060:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | |||
| 0003bf80:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0003bf90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bfa0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bfb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bfc0:·3d22·6964·6d39·3138·3922·3e3c·7461·626c··="idm9189"><tabl | |||
| 0003bfd0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bfe0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bff0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c000:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c010:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c020:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c030:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c040:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c050:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c060:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c070:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003c080:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c090:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003c0a0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003c0b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c0c0:·6f64·653e·2d2d·2d0a·6170·6956·6572·7369··ode>---.apiVersi | |||
| 0003c0d0:·6f6e·3a20·6d61·6368·696e·6563·6f6e·6669··on:·machineconfi | |||
| 0003c0e0:·6775·7261·7469·6f6e·2e6f·7065·6e73·6869··guration.openshi | |||
| 0003c0f0:·6674·2e69·6f2f·7631·0a6b·696e·643a·204d··ft.io/v1.kind:·M | |||
| 0003c100:·6163·6869·6e65·436f·6e66·6967·0a73·7065··achineConfig.spe | |||
| 0003c110:·633a·0a20·2063·6f6e·6669·673a·0a20·2020··c:.··config:.··· | |||
| 0003c120:·2069·676e·6974·696f·6e3a·0a20·2020·2020···ignition:.····· | |||
| 0003c130:·2076·6572·7369·6f6e·3a20·332e·312e·300a···version:·3.1.0. | |||
| 0003c140:·2020·2020·7379·7374·656d·643a·0a20·2020······systemd:.··· | |||
| 0003c150:·2020·2075·6e69·7473·3a0a·2020·2020·2020·····units:.······ | |||
| 0003c160:·2020·2d20·6e61·6d65·3a20·636f·6e66·6967····-·name:·config | |||
| 0003c170:·7572·652d·6372·7970·746f·2d70·6f6c·6963··ure-crypto-polic | |||
| 0003c180:·792e·7365·7276·6963·650a·2020·2020·2020··y.service.······ | |||
| 0003c190:·2020·2020·656e·6162·6c65·643a·2074·7275······enabled:·tru | |||
| 0003c1a0:·650a·2020·2020·2020·2020·2020·636f·6e74··e.··········cont | |||
| 0003c1b0:·656e·7473·3a20·7c0a·2020·2020·2020·2020··ents:·|.········ | |||
| 0003c1c0:·2020·2020·5b55·6e69·745d·0a20·2020·2020······[Unit].····· | |||
| 0003c1d0:·2020·2020·2020·2042·6566·6f72·653d·6b75·········Before=ku | |||
| 0003c1e0:·6265·6c65·742e·7365·7276·6963·650a·2020··belet.service.·· | |||
| 0003c1f0:·2020·2020·2020·2020·2020·5b53·6572·7669············[Servi | |||
| 0003c200:·6365·5d0a·2020·2020·2020·2020·2020·2020··ce].············ | |||
| 0003c210:·5479·7065·3d6f·6e65·7368·6f74·0a20·2020··Type=oneshot.··· | |||
| 0003c220:·2020·2020·2020·2020·2045·7865·6353·7461···········ExecSta | |||
| 0003c | 0003c070:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | ||
| 0003c | 0003c080:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | ||
| 0003c250:·7b7b·2e76·6172·5f73·7973·7465·6d5f·6372··{{.var_system_cr | |||
| 0003c260:·7970·746f·5f70·6f6c·6963·797d·7d0a·2020··ypto_policy}}.·· | |||
| 0003c270:·2020·2020·2020·2020·2020·5265·6d61·696e············Remain | |||
| 0003c280:·4166·7465·7245·7869·743d·7965·730a·2020··AfterExit=yes.·· | |||
| 0003c290:·2020·2020·2020·2020·2020·5b49·6e73·7461············[Insta | |||
| 0003c2a0:·6c6c·5d0a·2020·2020·2020·2020·2020·2020··ll].············ | |||
| 0003c2b0:·5761·6e74·6564·4279·3d6d·756c·7469·2d75··WantedBy=multi-u | |||
| 0003c2c0:·7365·722e·7461·7267·6574·0a3c·2f63·6f64··ser.target.</cod | |||
| 0003c2d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c2e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c2f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c300:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c320:·6d39·3139·3022·2074·6162·696e·6465·783d··m9190"·tabindex= | |||
| 0003c330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c380:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003c390:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003c3a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c3b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c3c0:·6170·7365·2220·6964·3d22·6964·6d39·3139··apse"·id="idm919 | |||
| 0003c3d0:·3022·3e3c·7072·653e·3c63·6f64·653e·0a76··0"><pre><code>.v | |||
| 0003c3e0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003c3f0:·5f70·6f6c·6963·793d·273c·6162·6272·2074··_policy='<abbr·t | |||
| 0003c400:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | |||
| 0003c410:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | |||
| 0003c420:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | |||
| 0003c430:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | |||
| 0003c440:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | |||
| 0003c450:·7279·7074·6f5f·706f·6c69·6379·223e·4445··rypto_policy">DE | |||
| 0003c460:·4641·554c·543c·2f61·6262·723e·270a·0a0a··FAULT</abbr>'... | |||
| 0003c470:·7374·6465·7272·5f6f·665f·6361·6c6c·3d24··stderr_of_call=$ | |||
| 0003c480:·2875·7064·6174·652d·6372·7970·746f·2d70··(update-crypto-p | |||
| 0003c490:·6f6c·6963·6965·7320·2d2d·7365·7420·247b··olicies·--set·${ | |||
| 0003c | 0003c090:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | ||
| 0003c | 0003c0a0:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | ||
| 0003c | 0003c0b0:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | ||
| 0003c | 0003c0c0:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | ||
| 0003c | 0003c0d0:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | ||
| 0003c | 0003c0e0:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | ||
| Max diff block lines reached; 1645786/1663504 bytes (98.93%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Advanced | 60 | ··············Linux·9·-·Advanced |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 175, 14 lines modified | Offset 175, 33 lines modified | ||
| 175 | ··-·PCI-DSSv4-2.2.7 | 175 | ··-·PCI-DSSv4-2.2.7 |
| 176 | ··-·configure_crypto_policy | 176 | ··-·configure_crypto_policy |
| 177 | ··-·high_severity | 177 | ··-·high_severity |
| 178 | ··-·low_complexity | 178 | ··-·low_complexity |
| 179 | ··-·low_disruption | 179 | ··-·low_disruption |
| 180 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 181 | ··-·restrict_strategy | 181 | ··-·restrict_strategy |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | var_system_crypto_policy='DEFAULT' | ||
| 184 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 185 | rc=$? | ||
| 186 | if·test·"$rc"·=·127;·then | ||
| 187 | » echo·"$stderr_of_call"·>&2 | ||
| 188 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 189 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 190 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 191 | » false··#·end·with·an·error·code | ||
| 192 | elif·test·"$rc"·!=·0;·then | ||
| 193 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 194 | » false··#·end·with·an·error·code | ||
| 195 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 187 | --- | 201 | --- |
| 188 | apiVersion:·machineconfiguration.openshift.io/v1 | 202 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 200, 33 lines modified | Offset 219, 14 lines modified | ||
| 200 | ············Before=kubelet.service | 219 | ············Before=kubelet.service |
| 201 | ············[Service] | 220 | ············[Service] |
| 202 | ············Type=oneshot | 221 | ············Type=oneshot |
| 203 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 222 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 204 | ············RemainAfterExit=yes | 223 | ············RemainAfterExit=yes |
| 205 | ············[Install] | 224 | ············[Install] |
| 206 | ············WantedBy=multi-user.target | 225 | ············WantedBy=multi-user.target |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 208 | var_system_crypto_policy='DEFAULT' | ||
| 209 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 210 | rc=$? | ||
| 211 | if·test·"$rc"·=·127;·then | ||
| 212 | » echo·"$stderr_of_call"·>&2 | ||
| 213 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 214 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 215 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 216 | » false··#·end·with·an·error·code | ||
| 217 | elif·test·"$rc"·!=·0;·then | ||
| 218 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | fi | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 224 | Severity: ··medium | 229 | Severity: ··medium |
| 225 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 230 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 226 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 231 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 227 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 232 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1718, 14 lines modified | Offset 1718, 33 lines modified | ||
| 1718 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·c\x8cr\x8ry\x8yp\x8pt\x8ts\x8se\x8et\x8tu\x8up\x8p·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1718 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·c\x8cr\x8ry\x8yp\x8pt\x8ts\x8se\x8et\x8tu\x8up\x8p·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1719 | The·cryptsetup·package·can·be·installed·with·the·following·command: | 1719 | The·cryptsetup·package·can·be·installed·with·the·following·command: |
| 1720 | $·sudo·dnf·install·cryptsetup | 1720 | $·sudo·dnf·install·cryptsetup |
| 1721 | Rationale:··LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. | 1721 | Rationale:··LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. |
| 1722 | Severity: ··medium | 1722 | Severity: ··medium |
| 1723 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed | 1723 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed |
| 1724 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 | 1724 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 |
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1726 | [[packages]] | ||
| 1727 | name·=·"cryptsetup" | ||
| 1728 | version·=·"*" | ||
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1731 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1732 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1733 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1734 | package·--add=cryptsetup | ||
| 1735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1736 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1737 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1738 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1739 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1740 | package·install·cryptsetup | ||
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1726 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1742 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1727 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1743 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1728 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1744 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1729 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1745 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1730 | -·name:·Ensure·cryptsetup·is·installed | 1746 | -·name:·Ensure·cryptsetup·is·installed |
| 1731 | ··package: | 1747 | ··package: |
| Offset 1735, 26 lines modified | Offset 1754, 14 lines modified | ||
| 1735 | ··-·PCI-DSSv4-3.5.1.2 | 1754 | ··-·PCI-DSSv4-3.5.1.2 |
| 1736 | ··-·enable_strategy | 1755 | ··-·enable_strategy |
| 1737 | ··-·low_complexity | 1756 | ··-·low_complexity |
| 1738 | ··-·low_disruption | 1757 | ··-·low_disruption |
| 1739 | ··-·medium_severity | 1758 | ··-·medium_severity |
| 1740 | ··-·no_reboot_needed | 1759 | ··-·no_reboot_needed |
| 1741 | ··-·package_cryptsetup-luks_installed | 1760 | ··-·package_cryptsetup-luks_installed |
| 1742 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1743 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 136189/142876 bytes (95.32%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038550:·2020·2861·7320·6f66·2032·3032·3 | 00038550:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038560:·2d3 | 00038560:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15305, 130 lines modified | Offset 15305, 130 lines modified | ||
| 0003bc80:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bc80:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bc90:·2369·646d·3931·3839·2220·7461·6269·6e64··#idm9189"·tabind | 0003bc90:·2369·646d·3931·3839·2220·7461·6269·6e64··#idm9189"·tabind | ||
| 0003bca0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bca0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bcb0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bcb0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bcc0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bcc0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bcd0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bcd0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003bce0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bce0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bcf0:·5265·6d65·6469·6174·696f·6e20· | 0003bcf0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003bd00:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003bd10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bd20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bd30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bd40:·3931·3839·223e·3c70·7265·3e3c·636f·6465··9189"><pre><code | |||
| 0003bd50:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003bd60:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003bd70:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003bd80:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003bd90:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003bda0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003bdb0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003bdc0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003bdd0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003bde0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003bd00:·726e·6574·6573·2073·6e69·7070·6574·20e2··rnetes·snippet·. | |||
| 0003bd10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bd20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bd30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bd40:·643d·2269·646d·3931·3839·223e·3c74·6162··d="idm9189"><tab | |||
| 0003bd50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bd60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bd70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bd80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bd90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bda0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bdb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bdc0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bdd0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bde0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bdf0:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 0003be00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003be10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003be20:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003be30:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003be40:·636f·6465·3e2d·2d2d·0a61·7069·5665·7273··code>---.apiVers | |||
| 0003be50:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | |||
| 0003be60:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | |||
| 0003be70:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | |||
| 0003be80:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | |||
| 0003be90:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | |||
| 0003bea0:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | |||
| 0003beb0:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | |||
| 0003bec0:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | |||
| 0003bed0:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | |||
| 0003bee0:·2020·202d·206e·616d·653a·2063·6f6e·6669·····-·name:·confi | |||
| 0003bef0:·6775·7265·2d63·7279·7074·6f2d·706f·6c69··gure-crypto-poli | |||
| 0003bf00:·6379·2e73·6572·7669·6365·0a20·2020·2020··cy.service.····· | |||
| 0003bf10:·2020·2020·2065·6e61·626c·6564·3a20·7472·······enabled:·tr | |||
| 0003bf20:·7565·0a20·2020·2020·2020·2020·2063·6f6e··ue.··········con | |||
| 0003bf30:·7465·6e74·733a·207c·0a20·2020·2020·2020··tents:·|.······· | |||
| 0003bf40:·2020·2020·205b·556e·6974·5d0a·2020·2020·······[Unit].···· | |||
| 0003bf50:·2020·2020·2020·2020·4265·666f·7265·3d6b··········Before=k | |||
| 0003bf60:·7562·656c·6574·2e73·6572·7669·6365·0a20··ubelet.service.· | |||
| 0003bf70:·2020·2020·2020·2020·2020·205b·5365·7276·············[Serv | |||
| 0003bf80:·6963·655d·0a20·2020·2020·2020·2020·2020··ice].··········· | |||
| 0003bf90:·2054·7970·653d·6f6e·6573·686f·740a·2020···Type=oneshot.·· | |||
| 0003bfa0:·2020·2020·2020·2020·2020·4578·6563·5374············ExecSt | |||
| 0003b | 0003bdf0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | ||
| 0003b | 0003be00:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | ||
| 0003bfd0:·207b·7b2e·7661·725f·7379·7374·656d·5f63···{{.var_system_c | |||
| 0003bfe0:·7279·7074·6f5f·706f·6c69·6379·7d7d·0a20··rypto_policy}}.· | |||
| 0003bff0:·2020·2020·2020·2020·2020·2052·656d·6169·············Remai | |||
| 0003c000:·6e41·6674·6572·4578·6974·3d79·6573·0a20··nAfterExit=yes.· | |||
| 0003c010:·2020·2020·2020·2020·2020·205b·496e·7374·············[Inst | |||
| 0003c020:·616c·6c5d·0a20·2020·2020·2020·2020·2020··all].··········· | |||
| 0003c030:·2057·616e·7465·6442·793d·6d75·6c74·692d···WantedBy=multi- | |||
| 0003c040:·7573·6572·2e74·6172·6765·740a·3c2f·636f··user.target.</co | |||
| 0003c050:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c060:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c070:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c080:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c090:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c0a0:·646d·3931·3930·2220·7461·6269·6e64·6578··dm9190"·tabindex | |||
| 0003c0b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c0c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c0d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c0e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c0f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c100:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003c110:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003c120:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c130:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c140:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003c150:·3930·223e·3c70·7265·3e3c·636f·6465·3e0a··90"><pre><code>. | |||
| 0003c160:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003c170:·6f5f·706f·6c69·6379·3d27·3c61·6262·7220··o_policy='<abbr· | |||
| 0003c180:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | |||
| 0003c190:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | |||
| 0003c1a0:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | |||
| 0003c1b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | |||
| 0003c1c0:·616c·7565·5f76·6172·5f73·7973·7465·6d5f··alue_var_system_ | |||
| 0003c1d0:·6372·7970·746f·5f70·6f6c·6963·7922·3e44··crypto_policy">D | |||
| 0003c1e0:·4546·4155·4c54·3c2f·6162·6272·3e27·0a0a··EFAULT</abbr>'.. | |||
| 0003c1f0:·0a73·7464·6572·725f·6f66·5f63·616c·6c3d··.stderr_of_call= | |||
| 0003c200:·2428·7570·6461·7465·2d63·7279·7074·6f2d··$(update-crypto- | |||
| 0003c210:·706f·6c69·6369·6573·202d·2d73·6574·2024··policies·--set·$ | |||
| 0003 | 0003be10:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | ||
| 0003 | 0003be20:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | ||
| 0003 | 0003be30:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | ||
| 0003 | 0003be40:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | ||
| 0003 | 0003be50:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | ||
| Max diff block lines reached; 1277622/1295478 bytes (98.62%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Basic | 60 | ··············Linux·9·-·Basic |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 167, 14 lines modified | Offset 167, 33 lines modified | ||
| 167 | ··-·PCI-DSSv4-2.2.7 | 167 | ··-·PCI-DSSv4-2.2.7 |
| 168 | ··-·configure_crypto_policy | 168 | ··-·configure_crypto_policy |
| 169 | ··-·high_severity | 169 | ··-·high_severity |
| 170 | ··-·low_complexity | 170 | ··-·low_complexity |
| 171 | ··-·low_disruption | 171 | ··-·low_disruption |
| 172 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 173 | ··-·restrict_strategy | 173 | ··-·restrict_strategy |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | var_system_crypto_policy='DEFAULT' | ||
| 176 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 177 | rc=$? | ||
| 178 | if·test·"$rc"·=·127;·then | ||
| 179 | » echo·"$stderr_of_call"·>&2 | ||
| 180 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 181 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 182 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 183 | » false··#·end·with·an·error·code | ||
| 184 | elif·test·"$rc"·!=·0;·then | ||
| 185 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 186 | » false··#·end·with·an·error·code | ||
| 187 | fi | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 179 | --- | 193 | --- |
| 180 | apiVersion:·machineconfiguration.openshift.io/v1 | 194 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 192, 33 lines modified | Offset 211, 14 lines modified | ||
| 192 | ············Before=kubelet.service | 211 | ············Before=kubelet.service |
| 193 | ············[Service] | 212 | ············[Service] |
| 194 | ············Type=oneshot | 213 | ············Type=oneshot |
| 195 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 214 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 196 | ············RemainAfterExit=yes | 215 | ············RemainAfterExit=yes |
| 197 | ············[Install] | 216 | ············[Install] |
| 198 | ············WantedBy=multi-user.target | 217 | ············WantedBy=multi-user.target |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | var_system_crypto_policy='DEFAULT' | ||
| 201 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 202 | rc=$? | ||
| 203 | if·test·"$rc"·=·127;·then | ||
| 204 | » echo·"$stderr_of_call"·>&2 | ||
| 205 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 206 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 207 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 208 | » false··#·end·with·an·error·code | ||
| 209 | elif·test·"$rc"·!=·0;·then | ||
| 210 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 211 | » false··#·end·with·an·error·code | ||
| 212 | fi | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 219 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 215 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 220 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 216 | Severity: ··medium | 221 | Severity: ··medium |
| 217 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 222 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 218 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 223 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 219 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 224 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1098, 36 lines modified | Offset 1098, 14 lines modified | ||
| 1098 | ··-·NIST-800-53-AC-8(c) | 1098 | ··-·NIST-800-53-AC-8(c) |
| 1099 | ··-·banner_etc_issue | 1099 | ··-·banner_etc_issue |
| 1100 | ··-·low_complexity | 1100 | ··-·low_complexity |
| 1101 | ··-·medium_disruption | 1101 | ··-·medium_disruption |
| 1102 | ··-·medium_severity | 1102 | ··-·medium_severity |
| 1103 | ··-·no_reboot_needed | 1103 | ··-·no_reboot_needed |
| 1104 | ··-·unknown_strategy | 1104 | ··-·unknown_strategy |
| 1105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1106 | --- | ||
| 1107 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1108 | kind:·MachineConfig | ||
| 1109 | metadata: | ||
| 1110 | ··labels: | ||
| 1111 | ····machineconfiguration.openshift.io/role:·master | ||
| 1112 | ····machineconfiguration.openshift.io/role:·worker | ||
| 1113 | ··name:·75-banner-etc-issue | ||
| 1114 | spec: | ||
| 1115 | ··config: | ||
| 1116 | ····ignition: | ||
| 1117 | ······version:·3.1.0 | ||
| 1118 | ····storage: | ||
| 1119 | ······files: | ||
| 1120 | ······-·contents: | ||
| 1121 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 1122 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 1123 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 1124 | ········mode:·0644 | ||
| 1125 | ········path:·/etc/issue.d/legal-notice | ||
| 1126 | ········overwrite:·true | ||
| 1127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1128 | #·Remediation·is·applicable·only·in·certain·platforms | 1106 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1129 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1107 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1130 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' | 1108 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' |
| Offset 1147, 14 lines modified | Offset 1125, 36 lines modified | ||
| 1147 | cat·<<EOF·>/etc/issue | 1125 | cat·<<EOF·>/etc/issue |
| 1148 | $formatted | 1126 | $formatted |
| 1149 | EOF | 1127 | EOF |
| 1150 | else | 1128 | else |
| 1151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| Max diff block lines reached; 88146/95359 bytes (92.44%) of diff not shown. | |||
| Offset 14417, 15 lines modified | Offset 14417, 15 lines modified | ||
| 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038570:·7320·6f66·2032·3032·3 | 00038570:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15346, 130 lines modified | Offset 15346, 130 lines modified | ||
| 0003bf10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bf10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bf20:·6964·6d39·3138·3922·2074·6162·696e·6465··idm9189"·tabinde | 0003bf20:·6964·6d39·3138·3922·2074·6162·696e·6465··idm9189"·tabinde | ||
| 0003bf30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bf30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bf40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bf40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bf50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bf50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bf60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bf60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bf70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bf70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bf80:·656d·6564·6961·7469·6f6e·20 | 0003bf80:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003bf90:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003bfa0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bfb0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfc0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003bfd0:·3138·3922·3e3c·7072·653e·3c63·6f64·653e··189"><pre><code> | |||
| 0003bfe0:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bff0:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | |||
| 0003c000:·2074·6974·6c65·3d22·6672·6f6d·2050·726f···title="from·Pro | |||
| 0003c010:·6669·6c65·2f72·6566·696e·652d·7661·6c75··file/refine-valu | |||
| 0003c020:·653a·2078·6363·6466·5f6f·7267·2e73·7367··e:·xccdf_org.ssg | |||
| 0003c030:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | |||
| 0003c040:·7661·6c75·655f·7661·725f·7379·7374·656d··value_var_system | |||
| 0003c050:·5f63·7279·7074·6f5f·706f·6c69·6379·223e··_crypto_policy"> | |||
| 0003c060:·4445·4641·554c·543c·2f61·6262·723e·270a··DEFAULT</abbr>'. | |||
| 0003c070:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | |||
| 0003bf90:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0003bfa0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bfb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bfc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bfd0:·3d22·6964·6d39·3138·3922·3e3c·7461·626c··="idm9189"><tabl | |||
| 0003bfe0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bff0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c000:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c010:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c020:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c030:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c040:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c050:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c060:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c070:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c080:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003c090:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c0a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003c0b0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003c0c0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c0d0:·6f64·653e·2d2d·2d0a·6170·6956·6572·7369··ode>---.apiVersi | |||
| 0003c0e0:·6f6e·3a20·6d61·6368·696e·6563·6f6e·6669··on:·machineconfi | |||
| 0003c0f0:·6775·7261·7469·6f6e·2e6f·7065·6e73·6869··guration.openshi | |||
| 0003c100:·6674·2e69·6f2f·7631·0a6b·696e·643a·204d··ft.io/v1.kind:·M | |||
| 0003c110:·6163·6869·6e65·436f·6e66·6967·0a73·7065··achineConfig.spe | |||
| 0003c120:·633a·0a20·2063·6f6e·6669·673a·0a20·2020··c:.··config:.··· | |||
| 0003c130:·2069·676e·6974·696f·6e3a·0a20·2020·2020···ignition:.····· | |||
| 0003c140:·2076·6572·7369·6f6e·3a20·332e·312e·300a···version:·3.1.0. | |||
| 0003c150:·2020·2020·7379·7374·656d·643a·0a20·2020······systemd:.··· | |||
| 0003c160:·2020·2075·6e69·7473·3a0a·2020·2020·2020·····units:.······ | |||
| 0003c170:·2020·2d20·6e61·6d65·3a20·636f·6e66·6967····-·name:·config | |||
| 0003c180:·7572·652d·6372·7970·746f·2d70·6f6c·6963··ure-crypto-polic | |||
| 0003c190:·792e·7365·7276·6963·650a·2020·2020·2020··y.service.······ | |||
| 0003c1a0:·2020·2020·656e·6162·6c65·643a·2074·7275······enabled:·tru | |||
| 0003c1b0:·650a·2020·2020·2020·2020·2020·636f·6e74··e.··········cont | |||
| 0003c1c0:·656e·7473·3a20·7c0a·2020·2020·2020·2020··ents:·|.········ | |||
| 0003c1d0:·2020·2020·5b55·6e69·745d·0a20·2020·2020······[Unit].····· | |||
| 0003c1e0:·2020·2020·2020·2042·6566·6f72·653d·6b75·········Before=ku | |||
| 0003c1f0:·6265·6c65·742e·7365·7276·6963·650a·2020··belet.service.·· | |||
| 0003c200:·2020·2020·2020·2020·2020·5b53·6572·7669············[Servi | |||
| 0003c210:·6365·5d0a·2020·2020·2020·2020·2020·2020··ce].············ | |||
| 0003c220:·5479·7065·3d6f·6e65·7368·6f74·0a20·2020··Type=oneshot.··· | |||
| 0003c230:·2020·2020·2020·2020·2045·7865·6353·7461···········ExecSta | |||
| 0003c | 0003c080:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | ||
| 0003c | 0003c090:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | ||
| 0003c260:·7b7b·2e76·6172·5f73·7973·7465·6d5f·6372··{{.var_system_cr | |||
| 0003c270:·7970·746f·5f70·6f6c·6963·797d·7d0a·2020··ypto_policy}}.·· | |||
| 0003c280:·2020·2020·2020·2020·2020·5265·6d61·696e············Remain | |||
| 0003c290:·4166·7465·7245·7869·743d·7965·730a·2020··AfterExit=yes.·· | |||
| 0003c2a0:·2020·2020·2020·2020·2020·5b49·6e73·7461············[Insta | |||
| 0003c2b0:·6c6c·5d0a·2020·2020·2020·2020·2020·2020··ll].············ | |||
| 0003c2c0:·5761·6e74·6564·4279·3d6d·756c·7469·2d75··WantedBy=multi-u | |||
| 0003c2d0:·7365·722e·7461·7267·6574·0a3c·2f63·6f64··ser.target.</cod | |||
| 0003c2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c330:·6d39·3139·3022·2074·6162·696e·6465·783d··m9190"·tabindex= | |||
| 0003c340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c390:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003c3a0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003c3b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c3c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c3d0:·6170·7365·2220·6964·3d22·6964·6d39·3139··apse"·id="idm919 | |||
| 0003c3e0:·3022·3e3c·7072·653e·3c63·6f64·653e·0a76··0"><pre><code>.v | |||
| 0003c3f0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003c400:·5f70·6f6c·6963·793d·273c·6162·6272·2074··_policy='<abbr·t | |||
| 0003c410:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | |||
| 0003c420:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | |||
| 0003c430:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | |||
| 0003c440:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | |||
| 0003c450:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | |||
| 0003c460:·7279·7074·6f5f·706f·6c69·6379·223e·4445··rypto_policy">DE | |||
| 0003c470:·4641·554c·543c·2f61·6262·723e·270a·0a0a··FAULT</abbr>'... | |||
| 0003c480:·7374·6465·7272·5f6f·665f·6361·6c6c·3d24··stderr_of_call=$ | |||
| 0003c490:·2875·7064·6174·652d·6372·7970·746f·2d70··(update-crypto-p | |||
| 0003c4a0:·6f6c·6963·6965·7320·2d2d·7365·7420·247b··olicies·--set·${ | |||
| 0003c | 0003c0a0:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | ||
| 0003c | 0003c0b0:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | ||
| 0003c | 0003c0c0:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | ||
| 0003c | 0003c0d0:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | ||
| 0003c | 0003c0e0:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | ||
| 0003c | 0003c0f0:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | ||
| Max diff block lines reached; 1616019/1633737 bytes (98.92%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Intermediate | 60 | ··············Linux·9·-·Intermediate |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 175, 14 lines modified | Offset 175, 33 lines modified | ||
| 175 | ··-·PCI-DSSv4-2.2.7 | 175 | ··-·PCI-DSSv4-2.2.7 |
| 176 | ··-·configure_crypto_policy | 176 | ··-·configure_crypto_policy |
| 177 | ··-·high_severity | 177 | ··-·high_severity |
| 178 | ··-·low_complexity | 178 | ··-·low_complexity |
| 179 | ··-·low_disruption | 179 | ··-·low_disruption |
| 180 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 181 | ··-·restrict_strategy | 181 | ··-·restrict_strategy |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | var_system_crypto_policy='DEFAULT' | ||
| 184 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 185 | rc=$? | ||
| 186 | if·test·"$rc"·=·127;·then | ||
| 187 | » echo·"$stderr_of_call"·>&2 | ||
| 188 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 189 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 190 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 191 | » false··#·end·with·an·error·code | ||
| 192 | elif·test·"$rc"·!=·0;·then | ||
| 193 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 194 | » false··#·end·with·an·error·code | ||
| 195 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 187 | --- | 201 | --- |
| 188 | apiVersion:·machineconfiguration.openshift.io/v1 | 202 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 200, 33 lines modified | Offset 219, 14 lines modified | ||
| 200 | ············Before=kubelet.service | 219 | ············Before=kubelet.service |
| 201 | ············[Service] | 220 | ············[Service] |
| 202 | ············Type=oneshot | 221 | ············Type=oneshot |
| 203 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 222 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 204 | ············RemainAfterExit=yes | 223 | ············RemainAfterExit=yes |
| 205 | ············[Install] | 224 | ············[Install] |
| 206 | ············WantedBy=multi-user.target | 225 | ············WantedBy=multi-user.target |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 208 | var_system_crypto_policy='DEFAULT' | ||
| 209 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 210 | rc=$? | ||
| 211 | if·test·"$rc"·=·127;·then | ||
| 212 | » echo·"$stderr_of_call"·>&2 | ||
| 213 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 214 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 215 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 216 | » false··#·end·with·an·error·code | ||
| 217 | elif·test·"$rc"·!=·0;·then | ||
| 218 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | fi | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 224 | Severity: ··medium | 229 | Severity: ··medium |
| 225 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 230 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 226 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 231 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 227 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 232 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 2140, 36 lines modified | Offset 2140, 14 lines modified | ||
| 2140 | ··-·NIST-800-53-AC-8(c) | 2140 | ··-·NIST-800-53-AC-8(c) |
| 2141 | ··-·banner_etc_issue | 2141 | ··-·banner_etc_issue |
| 2142 | ··-·low_complexity | 2142 | ··-·low_complexity |
| 2143 | ··-·medium_disruption | 2143 | ··-·medium_disruption |
| 2144 | ··-·medium_severity | 2144 | ··-·medium_severity |
| 2145 | ··-·no_reboot_needed | 2145 | ··-·no_reboot_needed |
| 2146 | ··-·unknown_strategy | 2146 | ··-·unknown_strategy |
| 2147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2148 | --- | ||
| 2149 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2150 | kind:·MachineConfig | ||
| 2151 | metadata: | ||
| 2152 | ··labels: | ||
| 2153 | ····machineconfiguration.openshift.io/role:·master | ||
| 2154 | ····machineconfiguration.openshift.io/role:·worker | ||
| 2155 | ··name:·75-banner-etc-issue | ||
| 2156 | spec: | ||
| 2157 | ··config: | ||
| 2158 | ····ignition: | ||
| 2159 | ······version:·3.1.0 | ||
| 2160 | ····storage: | ||
| 2161 | ······files: | ||
| 2162 | ······-·contents: | ||
| 2163 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 2164 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 2165 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 2166 | ········mode:·0644 | ||
| 2167 | ········path:·/etc/issue.d/legal-notice | ||
| 2168 | ········overwrite:·true | ||
| 2169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2170 | #·Remediation·is·applicable·only·in·certain·platforms | 2148 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 2172 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' | 2150 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' |
| Offset 2189, 14 lines modified | Offset 2167, 36 lines modified | ||
| 2189 | cat·<<EOF·>/etc/issue | 2167 | cat·<<EOF·>/etc/issue |
| 2190 | $formatted | 2168 | $formatted |
| 2191 | EOF | 2169 | EOF |
| 2192 | else | 2170 | else |
| 2193 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| Max diff block lines reached; 131269/138496 bytes (94.78%) of diff not shown. | |||
| Offset 14413, 15 lines modified | Offset 14413, 15 lines modified | ||
| 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038530:·3 | 00038530:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15232, 236 lines modified | Offset 15232, 236 lines modified | ||
| 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b860:·6564·6961·7469·6f6e·204 | 0003b860:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b870:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b880:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b890:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8b0:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b870:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b880:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b890:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b8a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b8b0:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b8c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b8d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b8e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b8f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b900:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b910:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b920:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b930:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b940:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b950:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b960:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b970:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b980:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b990:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b9a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b9b0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b9c0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b9d0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b9e0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b9f0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ba00:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003ba10:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003ba20:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003ba30:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003ba40:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003ba50:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003ba60:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ba70:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003ba80:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003ba90:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003baa0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bab0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bac0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bad0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bae0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003baf0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bb00:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bb10:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bb20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bb30:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bb40:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bb50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bb60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bb70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bb80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bb90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bba0:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003bbb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bbc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bbd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bbe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bbf0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bc00:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bc10:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bc20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bc30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bc40:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003bc50:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003bc60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bc70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bc80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bc90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bca0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bcb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bcc0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bcd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bce0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003bcf0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bd00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bd10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bd20:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bd30:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003b8c0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003b8d0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b8e0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bd50:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003bd60:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bd70:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bd80:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bd90:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bda0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bdb0:·743d·2223·6964·6d38·3433·3022·2074·6162··t="#idm8430"·tab | |||
| 0003bdc0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bdd0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bde0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bdf0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003be00:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003be10:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003be20:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003be30:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003be40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003be50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| Max diff block lines reached; 5456869/5489215 bytes (99.41%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 127, 14 lines modified | Offset 127, 33 lines modified | ||
| 127 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 127 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ············_\x8c_\x8i_\x8s············6.1.1 | 131 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 133 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·--add=aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·install·aide | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | -·name:·Ensure·aide·is·installed | 155 | -·name:·Ensure·aide·is·installed |
| 140 | ··package: | 156 | ··package: |
| Offset 149, 26 lines modified | Offset 168, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 168 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 169 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 170 | ··-·low_complexity |
| 152 | ··-·low_disruption | 171 | ··-·low_disruption |
| 153 | ··-·medium_severity | 172 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·install·aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | 180 | #·Remediation·is·applicable·only·in·certain·platforms |
| 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 181 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 188, 21 lines modified | Offset 195, 14 lines modified | ||
| 188 | include·install_aide | 195 | include·install_aide |
| 189 | class·install_aide·{ | 196 | class·install_aide·{ |
| 190 | ··package·{·'aide': | 197 | ··package·{·'aide': |
| 191 | ····ensure·=>·'installed', | 198 | ····ensure·=>·'installed', |
| 192 | ··} | 199 | ··} |
| 193 | } | 200 | } |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | package·--add=aide | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Run·the·following·command·to·generate·a·new·database: | 202 | Run·the·following·command·to·generate·a·new·database: |
| 202 | $·sudo·/usr/sbin/aide·--init | 203 | $·sudo·/usr/sbin/aide·--init |
| 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 204 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 205 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 205 | To·initiate·a·manual·check,·run·the·following·command: | 206 | To·initiate·a·manual·check,·run·the·following·command: |
| 206 | $·sudo·/usr/sbin/aide·--check | 207 | $·sudo·/usr/sbin/aide·--check |
| Offset 728, 14 lines modified | Offset 728, 33 lines modified | ||
| 728 | ··-·PCI-DSSv4-2.2.7 | 728 | ··-·PCI-DSSv4-2.2.7 |
| 729 | ··-·configure_crypto_policy | 729 | ··-·configure_crypto_policy |
| 730 | ··-·high_severity | 730 | ··-·high_severity |
| 731 | ··-·low_complexity | 731 | ··-·low_complexity |
| 732 | ··-·low_disruption | 732 | ··-·low_disruption |
| 733 | ··-·no_reboot_needed | 733 | ··-·no_reboot_needed |
| 734 | ··-·restrict_strategy | 734 | ··-·restrict_strategy |
| 735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 736 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 737 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 738 | rc=$? | ||
| 739 | if·test·"$rc"·=·127;·then | ||
| 740 | » echo·"$stderr_of_call"·>&2 | ||
| 741 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 742 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 743 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 744 | » false··#·end·with·an·error·code | ||
| 745 | elif·test·"$rc"·!=·0;·then | ||
| 746 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 747 | » false··#·end·with·an·error·code | ||
| 748 | fi | ||
| 735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 749 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 736 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 750 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 420366/425994 bytes (98.68%) of diff not shown. | |||
| Offset 14413, 16 lines modified | Offset 14413, 16 lines modified | ||
| 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038530:·2861·7320·6f66·2032·3032·3 | 00038530:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00038540:·3 | 00038540:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15201, 235 lines modified | Offset 15201, 235 lines modified | ||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | ||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b670:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b680:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b690:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6 | 0003b670:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b680:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b690:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b6a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b6b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b6c0:·3d22·6964·6d38·3432·3822·3e3c·7072·653e··="idm8428"><pre> | |||
| 0003b6d0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b6e0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b6f0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b700:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b | 0003b710:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b6d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b6e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b6f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b700:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b7 | 0003b720:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b730:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b740:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b750:·3d22·2369·646d·3834·3239·2220·7461·6269··="#idm8429"·tabi | |||
| 0003b760:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b770:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b780:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b790:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b7a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7b0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b7c0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003b7d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b7e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b7f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b800:·643d·2269·646d·3834·3239·223e·3c74·6162··d="idm8429"><tab | |||
| 0003b810:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b820:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b830:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b840:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b850:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b860:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b870:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b880:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b890:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b8a0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b8b0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b8c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b8d0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b8e0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b8f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b900:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003b910:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003b920:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b930:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b940:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b950:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b960:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b970:·3330·2220·7461·6269·6e64·6578·3d22·3022··30"·tabindex="0" | |||
| 0003b980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b9a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b9b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b9c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b9d0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b9e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b9f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ba00:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ba10:·2269·646d·3834·3330·223e·3c74·6162·6c65··"idm8430"><table | |||
| 0003ba20:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ba30:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ba40:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ba50:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba60:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003ba70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b750:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b760:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b770:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b780:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b790:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b7a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b7b0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b7c0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b7d0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b7e0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b7f0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b800:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b810:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b820:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b830:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b840:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b850:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b860:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b870:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b880:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003b890:·4c2d·3039·2d36·3531·3031·300a·2020·2d20··L-09-651010.··-· | |||
| 0003b8a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b8b0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b8c0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b8d0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b8e0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b8f0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b900:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b910:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b920:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| Max diff block lines reached; 3473330/3505676 bytes (99.08%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 144, 26 lines modified | Offset 163, 14 lines modified | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 145 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 165 | ··-·low_complexity |
| 147 | ··-·low_disruption | 166 | ··-·low_disruption |
| 148 | ··-·medium_severity | 167 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·install·aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | 175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 190, 14 lines modified | ||
| 183 | include·install_aide | 190 | include·install_aide |
| 184 | class·install_aide·{ | 191 | class·install_aide·{ |
| 185 | ··package·{·'aide': | 192 | ··package·{·'aide': |
| 186 | ····ensure·=>·'installed', | 193 | ····ensure·=>·'installed', |
| 187 | ··} | 194 | ··} |
| 188 | } | 195 | } |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 198 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 201 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 202 | $·sudo·/usr/sbin/aide·--check |
| Offset 723, 14 lines modified | Offset 723, 33 lines modified | ||
| 723 | ··-·PCI-DSSv4-2.2.7 | 723 | ··-·PCI-DSSv4-2.2.7 |
| 724 | ··-·configure_crypto_policy | 724 | ··-·configure_crypto_policy |
| 725 | ··-·high_severity | 725 | ··-·high_severity |
| 726 | ··-·low_complexity | 726 | ··-·low_complexity |
| 727 | ··-·low_disruption | 727 | ··-·low_disruption |
| 728 | ··-·no_reboot_needed | 728 | ··-·no_reboot_needed |
| 729 | ··-·restrict_strategy | 729 | ··-·restrict_strategy |
| 730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 731 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 732 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 733 | rc=$? | ||
| 734 | if·test·"$rc"·=·127;·then | ||
| 735 | » echo·"$stderr_of_call"·>&2 | ||
| 736 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 737 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 738 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 739 | » false··#·end·with·an·error·code | ||
| 740 | elif·test·"$rc"·!=·0;·then | ||
| 741 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 742 | » false··#·end·with·an·error·code | ||
| 743 | fi | ||
| 730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 744 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 731 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 745 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 296475/302113 bytes (98.13%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038550:·313 | 00038550:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15192, 236 lines modified | Offset 15192, 236 lines modified | ||
| 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | ||
| 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b5e0:·6d65·6469·6174·696f·6e20·4 | 0003b5e0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b5f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b600:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b610:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b620:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b630:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | |||
| 0003b5f0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b600:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b610:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b620:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b630:·6d38·3432·3822·3e3c·7461·626c·6520·636c··m8428"><table·cl | |||
| 0003b640:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b650:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b660:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b670:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b680:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b690:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b6a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b6b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b6c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b6d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b6e0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b6f0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b700:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b710:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b720:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b730:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b740:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b750:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b760:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b770:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b780:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b790:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b7a0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b7b0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b7c0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b7d0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b7e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b7f0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b800:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b810:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b820:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b830:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b840:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b850:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b860:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b870:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b880:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b890:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b8a0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b8b0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b8c0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b8d0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b8e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b8f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b900:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b910:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b920:·6574·3d22·2369·646d·3834·3239·2220·7461··et="#idm8429"·ta | |||
| 0003b930:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b940:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b950:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b960:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b970:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b980:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b990:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b9a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b9b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b9c0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b9d0:·3239·223e·3c74·6162·6c65·2063·6c61·7373··29"><table·class | |||
| 0003b9e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b9f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ba00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ba10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ba20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ba30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba40:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ba50:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ba60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba70:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003ba80:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ba90:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003baa0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bab0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b640:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b650:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b660:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003bad0:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003bae0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003baf0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bb00:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bb10:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bb20:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bb30:·6574·3d22·2369·646d·3834·3330·2220·7461··et="#idm8430"·ta | |||
| 0003bb40:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bb50:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bb60:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bb70:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bb80:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bb90:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bba0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003bbb0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bbc0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bbd0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 3210883/3243367 bytes (99.00%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·--add=aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·install·aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 150 | ··package: |
| Offset 143, 26 lines modified | Offset 162, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 164 | ··-·low_complexity |
| 146 | ··-·low_disruption | 165 | ··-·low_disruption |
| 147 | ··-·medium_severity | 166 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 189, 14 lines modified | ||
| 182 | include·install_aide | 189 | include·install_aide |
| 183 | class·install_aide·{ | 190 | class·install_aide·{ |
| 184 | ··package·{·'aide': | 191 | ··package·{·'aide': |
| 185 | ····ensure·=>·'installed', | 192 | ····ensure·=>·'installed', |
| 186 | ··} | 193 | ··} |
| 187 | } | 194 | } |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 200 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 201 | $·sudo·/usr/sbin/aide·--check |
| Offset 722, 14 lines modified | Offset 722, 33 lines modified | ||
| 722 | ··-·PCI-DSSv4-2.2.7 | 722 | ··-·PCI-DSSv4-2.2.7 |
| 723 | ··-·configure_crypto_policy | 723 | ··-·configure_crypto_policy |
| 724 | ··-·high_severity | 724 | ··-·high_severity |
| 725 | ··-·low_complexity | 725 | ··-·low_complexity |
| 726 | ··-·low_disruption | 726 | ··-·low_disruption |
| 727 | ··-·no_reboot_needed | 727 | ··-·no_reboot_needed |
| 728 | ··-·restrict_strategy | 728 | ··-·restrict_strategy |
| 729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 730 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 731 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 732 | rc=$? | ||
| 733 | if·test·"$rc"·=·127;·then | ||
| 734 | » echo·"$stderr_of_call"·>&2 | ||
| 735 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 736 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 737 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 738 | » false··#·end·with·an·error·code | ||
| 739 | elif·test·"$rc"·!=·0;·then | ||
| 740 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 741 | » false··#·end·with·an·error·code | ||
| 742 | fi | ||
| 729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 744 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 273445/279014 bytes (98.00%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038550:·313 | 00038550:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15224, 235 lines modified | Offset 15224, 235 lines modified | ||
| 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | ||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7e0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b7f0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b800:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b810:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b820:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b830:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b840:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b850:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b860:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b | 0003b7e0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b7f0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b800:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b810:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b820:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b830:·2269·646d·3834·3238·223e·3c70·7265·3e3c··"idm8428"><pre>< | |||
| 0003b840:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b850:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b860:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b870:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b880:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b890:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b8a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b8b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b8c0:·2223·6964·6d38·3432·3922·2074·6162·696e··"#idm8429"·tabin | |||
| 0003b8d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b8e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b8f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b900:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b910:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b920:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003b930:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003b940:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b950:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b960:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b970:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003b980:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b990:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b9a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b9b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b9c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b9d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b9f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ba00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba10:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ba20:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ba30:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003ba40:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b890:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003ba50:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ba60:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba70:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003ba80:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003ba90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003baa0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bab0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bac0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bad0:·2d74·6172·6765·743d·2223·6964·6d38·3433··-target="#idm843 | |||
| 0003bae0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003baf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bb00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bb10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bb20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bb30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bb40:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003bb50:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bb60:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bb70:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bb80:·6964·6d38·3433·3022·3e3c·7461·626c·6520··idm8430"><table· | |||
| 0003bb90:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bba0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bbb0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bbc0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bbd0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003bbe0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b8c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b8d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b8e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b8f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b900:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b910:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b920:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b930:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b940:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b950:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b960:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b970:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b980:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b990:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b9a0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b9b0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b9c0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b9d0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b9e0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b9f0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003ba00:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003ba10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003ba20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003ba30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003ba40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003ba50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003ba60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003ba70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| Max diff block lines reached; 5317026/5349372 bytes (99.40%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 126, 14 lines modified | Offset 126, 33 lines modified | ||
| 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8c_\x8i_\x8s············6.1.1 | 130 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 132 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·--add=aide | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·install·aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Ensure·aide·is·installed | 154 | -·name:·Ensure·aide·is·installed |
| 139 | ··package: | 155 | ··package: |
| Offset 148, 26 lines modified | Offset 167, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 169 | ··-·low_complexity |
| 151 | ··-·low_disruption | 170 | ··-·low_disruption |
| 152 | ··-·medium_severity | 171 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·install·aide | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 179 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 187, 21 lines modified | Offset 194, 14 lines modified | ||
| 187 | include·install_aide | 194 | include·install_aide |
| 188 | class·install_aide·{ | 195 | class·install_aide·{ |
| 189 | ··package·{·'aide': | 196 | ··package·{·'aide': |
| 190 | ····ensure·=>·'installed', | 197 | ····ensure·=>·'installed', |
| 191 | ··} | 198 | ··} |
| 192 | } | 199 | } |
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | package·--add=aide | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 201 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/sbin/aide·--init | 202 | $·sudo·/usr/sbin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 204 | To·initiate·a·manual·check,·run·the·following·command: | 205 | To·initiate·a·manual·check,·run·the·following·command: |
| 205 | $·sudo·/usr/sbin/aide·--check | 206 | $·sudo·/usr/sbin/aide·--check |
| Offset 727, 14 lines modified | Offset 727, 33 lines modified | ||
| 727 | ··-·PCI-DSSv4-2.2.7 | 727 | ··-·PCI-DSSv4-2.2.7 |
| 728 | ··-·configure_crypto_policy | 728 | ··-·configure_crypto_policy |
| 729 | ··-·high_severity | 729 | ··-·high_severity |
| 730 | ··-·low_complexity | 730 | ··-·low_complexity |
| 731 | ··-·low_disruption | 731 | ··-·low_disruption |
| 732 | ··-·no_reboot_needed | 732 | ··-·no_reboot_needed |
| 733 | ··-·restrict_strategy | 733 | ··-·restrict_strategy |
| 734 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 735 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 736 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 737 | rc=$? | ||
| 738 | if·test·"$rc"·=·127;·then | ||
| 739 | » echo·"$stderr_of_call"·>&2 | ||
| 740 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 741 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 742 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 743 | » false··#·end·with·an·error·code | ||
| 744 | elif·test·"$rc"·!=·0;·then | ||
| 745 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 746 | » false··#·end·with·an·error·code | ||
| 747 | fi | ||
| 734 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 748 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 735 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 749 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 406102/411671 bytes (98.65%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038770:·3032·3 | 00038770:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15647, 262 lines modified | Offset 15647, 262 lines modified | ||
| 0003d1e0:·6574·3d22·2369·646d·3839·3834·2220·7461··et="#idm8984"·ta | 0003d1e0:·6574·3d22·2369·646d·3839·3834·2220·7461··et="#idm8984"·ta | ||
| 0003d1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003d1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003d200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003d200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003d210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003d210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003d220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003d220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003d230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003d230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003d240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003d240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003d250:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003d260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003d270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003d280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003d290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003d2a0:·6d38·3938·3422·3e3c·7072·653e·3c63·6f64··m8984"><pre><cod | |||
| 0003d2b0:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 0003d2c0:·6e73·5d0a·6669·7073·203d·2074·7275·650a··ns].fips·=·true. | |||
| 0003d2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003d2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003d2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003d300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003d310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003d320:·3d22·2369·646d·3839·3835·2220·7461·6269··="#idm8985"·tabi | |||
| 0003d330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003d340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003d350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003d360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003d370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003d380:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003d | 0003d390:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003d | 0003d3a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003d | 0003d3b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003d | 0003d3c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003d | 0003d3d0:·3d22·6964·6d38·3938·3522·3e3c·7461·626c··="idm8985"><tabl | ||
| 0003d | 0003d3e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003d | 0003d3f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003d | 0003d400:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003d | 0003d410:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003d | 0003d420:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003d | 0003d430:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003d440:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d450:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003d460:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0003d470:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003d480:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0003d | 0003d490:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003d310:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003d320:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0003d330:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003d340:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e74··eboot:</th><td>t | |||
| 0003d350:·7275·653c·2f74·643e·3c2f·7472·3e3c·7472··rue</td></tr><tr | |||
| 0003d | 0003d4a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003d | 0003d4b0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003d | 0003d4c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003d | 0003d4d0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003d | 0003d4e0:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | ||
| 0003d | 0003d4f0:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003d | 0003d500:·706f·6c69·6379·2023·2070·726f·6d6f·7465··policy·#·promote | ||
| 0003d | 0003d510:·2074·6f20·7661·7269·6162·6c65·0a20·2073···to·variable.··s | ||
| 0003d | 0003d520:·6574·5f66·6163·743a·0a20·2020·2076·6172··et_fact:.····var | ||
| 0003d | 0003d530:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003d | 0003d540:·6f6c·6963·793a·2021·2173·7472·203c·6162··olicy:·!!str·<ab | ||
| 0003d | 0003d550:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | ||
| 0003d | 0003d560:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | ||
| 0003d | 0003d570:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | ||
| 0003d | 0003d580:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 0003d | 0003d590:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003d | 0003d5a0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003d | 0003d5b0:·223e·4649·5053·3c2f·6162·6272·3e0a·2020··">FIPS</abbr>.·· | ||
| 0003d | 0003d5c0:·7461·6773·3a0a·2020·2020·2d20·616c·7761··tags:.····-·alwa | ||
| 0003d | 0003d5d0:·7973·0a0a·2d20·6e61·6d65·3a20·456e·6162··ys..-·name:·Enab | ||
| 0003d | 0003d5e0:·6c65·2046·4950·5320·4d6f·6465·202d·2043··le·FIPS·Mode·-·C | ||
| 0003d | 0003d5f0:·6865·636b·2074·6f20·5365·6520·7468·6520··heck·to·See·the· | ||
| 0003d | 0003d600:·4375·7272·656e·7420·5374·6174·7573·206f··Current·Status·o | ||
| 0003d | 0003d610:·6620·4649·5053·204d·6f64·650a·2020·616e··f·FIPS·Mode.··an | ||
| 0003d | 0003d620:·7369·626c·652e·6275·696c·7469·6e2e·636f··sible.builtin.co | ||
| 0003d | 0003d630:·6d6d·616e·643a·202f·7573·722f·6269·6e2f··mmand:·/usr/bin/ | ||
| 0003d | 0003d640:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | ||
| 0003d | 0003d650:·2d2d·6368·6563·6b0a·2020·7265·6769·7374··--check.··regist | ||
| 0003d | 0003d660:·6572·3a20·6973·5f66·6970·735f·656e·6162··er:·is_fips_enab | ||
| 0003d | 0003d670:·6c65·640a·2020·6661·696c·6564·5f77·6865··led.··failed_whe | ||
| 0003d | 0003d680:·6e3a·2066·616c·7365·0a20·2063·6861·6e67··n:·false.··chang | ||
| 0003d | 0003d690:·6564·5f77·6865·6e3a·2066·616c·7365·0a20··ed_when:·false.· | ||
| 0003d | 0003d6a0:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | ||
| 0003d570:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003d580:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003d590:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003d5a0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003d5b0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003d5c0:·6572·225d·0a20·2020·2061·6e64·206e·6f74··er"].····and·not | |||
| 0003d5d0:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | |||
| 0003d5e0:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | |||
| 0003d5f0:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | |||
| 0003d600:·2029·2029·0a20·202d·2061·6e73·6962·6c65···)·).··-·ansible | |||
| 0003d610:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003d620:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003d630:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003d640:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003d650:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003d660:·2074·6167·733a·0a20·202d·2044·4953·412d···tags:.··-·DISA- | |||
| 0003d670:·5354·4947·2d52·4845·4c2d·3039·2d36·3731··STIG-RHEL-09-671 | |||
| 0003d680:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003d690:·2d35·332d·434d·2d33·2836·290a·2020·2d20··-53-CM-3(6).··-· | |||
| 0003d6a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003d6b0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003d6c0:·2d35·332d·4941·2d37·0a20·202d·204e·4953··-53-IA-7.··-·NIS | |||
| 0003d6d0:·542d·3830·302d·3533·2d53·432d·3132·0a20··T-800-53-SC-12.· | |||
| 0003d6e0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003d6f0:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 0003d700:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 0003d710:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003d720:·2d53·432d·3133·0a20·202d·2065·6e61·626c··-SC-13.··-·enabl | |||
| 0003d730:·655f·6669·7073·5f6d·6f64·650a·2020·2d20··e_fips_mode.··-· | |||
| Max diff block lines reached; 2641193/2677127 bytes (98.66%) of diff not shown. | |||
| Offset 68, 15 lines modified | Offset 68, 15 lines modified | ||
| 68 | ··············Systems·and·Organizations·(NIST·800-171) | 68 | ··············Systems·and·Organizations·(NIST·800-171) |
| 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:9 | 71 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 72 | ····*·cpe:/o:centos:centos:9 | 72 | ····*·cpe:/o:centos:centos:9 |
| 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 219, 14 lines modified | Offset 219, 18 lines modified | ||
| 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 220 | ············_\x8i_\x8s_\x8m······1446 | 220 | ············_\x8i_\x8s_\x8m······1446 |
| 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 227 | [customizations] | ||
| 228 | fips·=·true | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 234 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 232 | ··set_fact: | 235 | ··set_fact: |
| Offset 326, 18 lines modified | Offset 330, 14 lines modified | ||
| 326 | ··-·NIST-800-53-SC-13 | 330 | ··-·NIST-800-53-SC-13 |
| 327 | ··-·enable_fips_mode | 331 | ··-·enable_fips_mode |
| 328 | ··-·high_severity | 332 | ··-·high_severity |
| 329 | ··-·medium_complexity | 333 | ··-·medium_complexity |
| 330 | ··-·medium_disruption | 334 | ··-·medium_disruption |
| 331 | ··-·reboot_required | 335 | ··-·reboot_required |
| 332 | ··-·restrict_strategy | 336 | ··-·restrict_strategy |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 334 | [customizations] | ||
| 335 | fips·=·true | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 337 | #·Remediation·is·applicable·only·in·certain·platforms | 338 | #·Remediation·is·applicable·only·in·certain·platforms |
| 338 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 339 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 339 | var_system_crypto_policy='FIPS' | 340 | var_system_crypto_policy='FIPS' |
| Offset 376, 14 lines modified | Offset 376, 33 lines modified | ||
| 376 | $·sudo·dnf·install·crypto-policies | 376 | $·sudo·dnf·install·crypto-policies |
| 377 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 377 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 378 | Severity: ··medium | 378 | Severity: ··medium |
| 379 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 379 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 380 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 380 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 381 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 381 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 382 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 382 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 384 | [[packages]] | ||
| 385 | name·=·"crypto-policies" | ||
| 386 | version·=·"*" | ||
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 392 | package·--add=crypto-policies | ||
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 398 | package·install·crypto-policies | ||
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 388 | -·name:·Ensure·crypto-policies·is·installed | 404 | -·name:·Ensure·crypto-policies·is·installed |
| 389 | ··package: | 405 | ··package: |
| Offset 393, 26 lines modified | Offset 412, 14 lines modified | ||
| 393 | ··-·DISA-STIG-RHEL-09-672010 | 412 | ··-·DISA-STIG-RHEL-09-672010 |
| 394 | ··-·enable_strategy | 413 | ··-·enable_strategy |
| 395 | ··-·low_complexity | 414 | ··-·low_complexity |
| 396 | ··-·low_disruption | 415 | ··-·low_disruption |
| 397 | ··-·medium_severity | 416 | ··-·medium_severity |
| 398 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 399 | ··-·package_crypto-policies_installed | 418 | ··-·package_crypto-policies_installed |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 405 | package·install·crypto-policies | ||
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 407 | [[packages]] | ||
| 408 | name·=·"crypto-policies" | ||
| 409 | version·=·"*" | ||
| 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 411 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 412 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 413 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 414 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 415 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 424 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 426, 21 lines modified | Offset 433, 14 lines modified | ||
| 426 | include·install_crypto-policies | 433 | include·install_crypto-policies |
| 427 | class·install_crypto-policies·{ | 434 | class·install_crypto-policies·{ |
| 428 | ··package·{·'crypto-policies': | 435 | ··package·{·'crypto-policies': |
| 429 | ····ensure·=>·'installed', | 436 | ····ensure·=>·'installed', |
| 430 | ··} | 437 | ··} |
| 431 | } | 438 | } |
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 356891/362967 bytes (98.33%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2028·6173·206f·6620·3230·323 | 00038540:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00038550:·3 | 00038550:·312d·3039·290a·2020·2020·2020·2020·2020··1-09).·········· | ||
| 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 17409, 131 lines modified | Offset 17409, 131 lines modified | ||
| 00044000:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00044000:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00044010:·646d·3931·3839·2220·7461·6269·6e64·6578··dm9189"·tabindex | 00044010:·646d·3931·3839·2220·7461·6269·6e64·6578··dm9189"·tabindex | ||
| 00044020:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00044020:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00044030:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00044030:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00044040:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00044040:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00044050:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00044050:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00044060:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00044060:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00044070:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 00044080:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 00044090:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000440a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000440b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000440c0:·2269·646d·3931·3839·223e·3c74·6162·6c65··"idm9189"><table | |||
| 000440d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000440e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000440f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00044100:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00044110:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00044120:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00044130:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00044140:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00044150:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00044160:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00044170:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 00044180:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00044190:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 000441a0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 000441b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 000441c0:·6465·3e2d·2d2d·0a61·7069·5665·7273·696f··de>---.apiVersio | |||
| 000441d0:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 000441e0:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| 000441f0:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | |||
| 00044200:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | |||
| 00044210:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | |||
| 00044220:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | |||
| 00044230:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | |||
| 00044240:·2020·2073·7973·7465·6d64·3a0a·2020·2020·····systemd:.···· | |||
| 00044250:·2020·756e·6974·733a·0a20·2020·2020·2020····units:.······· | |||
| 00044260:·202d·206e·616d·653a·2063·6f6e·6669·6775···-·name:·configu | |||
| 00044270:·7265·2d63·7279·7074·6f2d·706f·6c69·6379··re-crypto-policy | |||
| 00044280:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 00044290:·2020·2065·6e61·626c·6564·3a20·7472·7565·····enabled:·true | |||
| 000442a0:·0a20·2020·2020·2020·2020·2063·6f6e·7465··.··········conte | |||
| 000442b0:·6e74·733a·207c·0a20·2020·2020·2020·2020··nts:·|.········· | |||
| 000442c0:·2020·205b·556e·6974·5d0a·2020·2020·2020·····[Unit].······ | |||
| 000442d0:·2020·2020·2020·4265·666f·7265·3d6b·7562········Before=kub | |||
| 000442e0:·656c·6574·2e73·6572·7669·6365·0a20·2020··elet.service.··· | |||
| 000442f0:·2020·2020·2020·2020·205b·5365·7276·6963···········[Servic | |||
| 00044300:·655d·0a20·2020·2020·2020·2020·2020·2054··e].············T | |||
| 00044310:·7970·653d·6f6e·6573·686f·740a·2020·2020··ype=oneshot.···· | |||
| 00044320:·2020·2020·2020·2020·4578·6563·5374·6172··········ExecStar | |||
| 00044330:·743d·7570·6461·7465·2d63·7279·7074·6f2d··t=update-crypto- | |||
| 00044340:·706f·6c69·6369·6573·202d·2d73·6574·207b··policies·--set·{ | |||
| 00044350:·7b2e·7661·725f·7379·7374·656d·5f63·7279··{.var_system_cry | |||
| 00044360:·7074·6f5f·706f·6c69·6379·7d7d·0a20·2020··pto_policy}}.··· | |||
| 00044370:·2020·2020·2020·2020·2052·656d·6169·6e41···········RemainA | |||
| 00044380:·6674·6572·4578·6974·3d79·6573·0a20·2020··fterExit=yes.··· | |||
| 00044390:·2020·2020·2020·2020·205b·496e·7374·616c···········[Instal | |||
| 000443a0:·6c5d·0a20·2020·2020·2020·2020·2020·2057··l].············W | |||
| 000443b0:·616e·7465·6442·793d·6d75·6c74·692d·7573··antedBy=multi-us | |||
| 000443c0:·6572·2e74·6172·6765·740a·3c2f·636f·6465··er.target.</code | |||
| 000443d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000443e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 000443f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00044400:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00044410:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00044420:·3931·3930·2220·7461·6269·6e64·6578·3d22··9190"·tabindex=" | |||
| 00044430:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00044440:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00044450:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00044460:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00044470:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00044 | 00044070:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 00044 | 00044080:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 00044 | 00044090:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00044 | 000440a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00044 | 000440b0:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | ||
| 00044 | 000440c0:·3839·223e·3c70·7265·3e3c·636f·6465·3e0a··89"><pre><code>. | ||
| 00044 | 000440d0:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 00044 | 000440e0:·6f5f·706f·6c69·6379·3d27·3c61·6262·7220··o_policy='<abbr· | ||
| 00044 | 000440f0:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | ||
| 00044 | 00044100:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | ||
| 00044 | 00044110:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | ||
| 00044 | 00044120:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | ||
| 00044 | 00044130:·616c·7565·5f76·6172·5f73·7973·7465·6d5f··alue_var_system_ | ||
| 00044 | 00044140:·6372·7970·746f·5f70·6f6c·6963·7922·3e44··crypto_policy">D | ||
| 00044 | 00044150:·4546·4155·4c54·3a4e·4f2d·5348·4131·3c2f··EFAULT:NO-SHA1</ | ||
| 00044 | 00044160:·6162·6272·3e27·0a0a·0a73·7464·6572·725f··abbr>'...stderr_ | ||
| 00044 | 00044170:·6f66·5f63·616c·6c3d·2428·7570·6461·7465··of_call=$(update | ||
| 00044 | 00044180:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | ||
| 00044 | 00044190:·202d·2d73·6574·2024·7b76·6172·5f73·7973···--set·${var_sys | ||
| 00044 | 000441a0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 00044 | 000441b0:·797d·2032·2667·743b·2661·6d70·3b31·2026··y}·2>&1·& | ||
| 00044 | 000441c0:·6774·3b20·2f64·6576·2f6e·756c·6c29·0a72··gt;·/dev/null).r | ||
| 00044 | 000441d0:·633d·243f·0a0a·6966·2074·6573·7420·2224··c=$?..if·test·"$ | ||
| 00044 | 000441e0:·7263·2220·3d20·3132·373b·2074·6865·6e0a··rc"·=·127;·then. | ||
| 00044 | 000441f0:·0965·6368·6f20·2224·7374·6465·7272·5f6f··.echo·"$stderr_o | ||
| 00044 | 00044200:·665f·6361·6c6c·2220·2667·743b·2661·6d70··f_call"·>& | ||
| 00044 | 00044210:·3b32·0a09·6563·686f·2022·4d61·6b65·2073··;2..echo·"Make·s | ||
| 00044 | 00044220:·7572·6520·7468·6174·2074·6865·2073·6372··ure·that·the·scr | ||
| 00044 | 00044230:·6970·7420·6973·2069·6e73·7461·6c6c·6564··ipt·is·installed | ||
| 00044 | 00044240:·206f·6e20·7468·6520·7265·6d65·6469·6174···on·the·remediat | ||
| 00044 | 00044250:·6564·2073·7973·7465·6d2e·2220·2667·743b··ed·system."·> | ||
| 00044 | 00044260:·2661·6d70·3b32·0a09·6563·686f·2022·5365··&2..echo·"Se | ||
| 00044 | 00044270:·6520·6f75·7470·7574·206f·6620·7468·6520··e·output·of·the· | ||
| 00044 | 00044280:·2764·6e66·2070·726f·7669·6465·7320·7570··'dnf·provides·up | ||
| 00044 | 00044290:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | ||
| 00044 | 000442a0:·6369·6573·2720·636f·6d6d·616e·6422·2026··cies'·command"·& | ||
| 00044 | 000442b0:·6774·3b26·616d·703b·320a·0965·6368·6f20··gt;&2..echo· | ||
| 00044 | 000442c0:·2274·6f20·7365·6520·7768·6174·2070·6163··"to·see·what·pac | ||
| Max diff block lines reached; 1885723/1903717 bytes (99.05%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 629, 14 lines modified | Offset 629, 33 lines modified | ||
| 629 | ··-·PCI-DSSv4-2.2.7 | 629 | ··-·PCI-DSSv4-2.2.7 |
| 630 | ··-·configure_crypto_policy | 630 | ··-·configure_crypto_policy |
| 631 | ··-·high_severity | 631 | ··-·high_severity |
| 632 | ··-·low_complexity | 632 | ··-·low_complexity |
| 633 | ··-·low_disruption | 633 | ··-·low_disruption |
| 634 | ··-·no_reboot_needed | 634 | ··-·no_reboot_needed |
| 635 | ··-·restrict_strategy | 635 | ··-·restrict_strategy |
| 636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 637 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 638 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 639 | rc=$? | ||
| 640 | if·test·"$rc"·=·127;·then | ||
| 641 | » echo·"$stderr_of_call"·>&2 | ||
| 642 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 643 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 644 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 645 | » false··#·end·with·an·error·code | ||
| 646 | elif·test·"$rc"·!=·0;·then | ||
| 647 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 648 | » false··#·end·with·an·error·code | ||
| 649 | fi | ||
| 636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 650 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 651 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 652 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 653 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 654 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 641 | --- | 655 | --- |
| 642 | apiVersion:·machineconfiguration.openshift.io/v1 | 656 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 654, 33 lines modified | Offset 673, 14 lines modified | ||
| 654 | ············Before=kubelet.service | 673 | ············Before=kubelet.service |
| 655 | ············[Service] | 674 | ············[Service] |
| 656 | ············Type=oneshot | 675 | ············Type=oneshot |
| 657 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 676 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 658 | ············RemainAfterExit=yes | 677 | ············RemainAfterExit=yes |
| 659 | ············[Install] | 678 | ············[Install] |
| 660 | ············WantedBy=multi-user.target | 679 | ············WantedBy=multi-user.target |
| 661 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 662 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 663 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 664 | rc=$? | ||
| 665 | if·test·"$rc"·=·127;·then | ||
| 666 | » echo·"$stderr_of_call"·>&2 | ||
| 667 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 668 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 669 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 670 | » false··#·end·with·an·error·code | ||
| 671 | elif·test·"$rc"·!=·0;·then | ||
| 672 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 673 | » false··#·end·with·an·error·code | ||
| 674 | fi | ||
| 675 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 680 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 676 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 681 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 677 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 682 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 678 | Severity: ··medium | 683 | Severity: ··medium |
| 679 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 684 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 680 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 685 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 681 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 686 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1013, 14 lines modified | Offset 1013, 33 lines modified | ||
| 1013 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 1013 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 1014 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1014 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1015 | The·rear·package·can·be·installed·with·the·following·command: | 1015 | The·rear·package·can·be·installed·with·the·following·command: |
| 1016 | $·sudo·dnf·install·rear | 1016 | $·sudo·dnf·install·rear |
| 1017 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1017 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1018 | Severity: ·medium | 1018 | Severity: ·medium |
| 1019 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 1019 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1021 | [[packages]] | ||
| 1022 | name·=·"rear" | ||
| 1023 | version·=·"*" | ||
| 1024 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1025 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1026 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1027 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1028 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1029 | package·--add=rear | ||
| 1030 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1031 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1032 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1033 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1034 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1035 | package·install·rear | ||
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1036 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1021 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1037 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1022 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1038 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1023 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1039 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1024 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1040 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1025 | -·name:·Ensure·rear·is·installed | 1041 | -·name:·Ensure·rear·is·installed |
| 1026 | ··package: | 1042 | ··package: |
| Offset 1034, 26 lines modified | Offset 1053, 14 lines modified | ||
| 1034 | ··tags: | 1053 | ··tags: |
| 1035 | ··-·enable_strategy | 1054 | ··-·enable_strategy |
| 1036 | ··-·low_complexity | 1055 | ··-·low_complexity |
| 1037 | ··-·low_disruption | 1056 | ··-·low_disruption |
| 1038 | ··-·medium_severity | 1057 | ··-·medium_severity |
| 1039 | ··-·no_reboot_needed | 1058 | ··-·no_reboot_needed |
| 1040 | ··-·package_rear_installed | 1059 | ··-·package_rear_installed |
| 1041 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1042 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 153928/160314 bytes (96.02%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038680:·6173·206f·6620·3230·323 | 00038680:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16817, 130 lines modified | Offset 16817, 130 lines modified | ||
| 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | ||
| 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00041b70:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 00041b80:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00041b90:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041ba0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041bb0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041bc0:·3931·3839·223e·3c74·6162·6c65·2063·6c61··9189"><table·cla | |||
| 00041bd0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041be0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041bf0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041c00:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041c10:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00041c20:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041c30:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00041c40:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00041c50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00041c60:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00041c70:·643e·7472·7565·3c2f·7464·3e3c·2f74·723e··d>true</td></tr> | |||
| 00041c80:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00041c90:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 00041ca0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 00041cb0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00041cc0:·2d2d·0a61·7069·5665·7273·696f·6e3a·206d··--.apiVersion:·m | |||
| 00041cd0:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | |||
| 00041ce0:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | |||
| 00041cf0:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | |||
| 00041d00:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | |||
| 00041d10:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | |||
| 00041d20:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | |||
| 00041d30:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | |||
| 00041d40:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | |||
| 00041d50:·6974·733a·0a20·2020·2020·2020·202d·206e··its:.········-·n | |||
| 00041d60:·616d·653a·2063·6f6e·6669·6775·7265·2d63··ame:·configure-c | |||
| 00041d70:·7279·7074·6f2d·706f·6c69·6379·2e73·6572··rypto-policy.ser | |||
| 00041d80:·7669·6365·0a20·2020·2020·2020·2020·2065··vice.··········e | |||
| 00041d90:·6e61·626c·6564·3a20·7472·7565·0a20·2020··nabled:·true.··· | |||
| 00041da0:·2020·2020·2020·2063·6f6e·7465·6e74·733a·········contents: | |||
| 00041db0:·207c·0a20·2020·2020·2020·2020·2020·205b···|.············[ | |||
| 00041dc0:·556e·6974·5d0a·2020·2020·2020·2020·2020··Unit].·········· | |||
| 00041dd0:·2020·4265·666f·7265·3d6b·7562·656c·6574····Before=kubelet | |||
| 00041de0:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 00041df0:·2020·2020·205b·5365·7276·6963·655d·0a20·······[Service].· | |||
| 00041e00:·2020·2020·2020·2020·2020·2054·7970·653d·············Type= | |||
| 00041e10:·6f6e·6573·686f·740a·2020·2020·2020·2020··oneshot.········ | |||
| 00041e20:·2020·2020·4578·6563·5374·6172·743d·7570······ExecStart=up | |||
| 00041e30:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 00041e40:·6369·6573·202d·2d73·6574·207b·7b2e·7661··cies·--set·{{.va | |||
| 00041e50:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00041e60:·706f·6c69·6379·7d7d·0a20·2020·2020·2020··policy}}.······· | |||
| 00041e70:·2020·2020·2052·656d·6169·6e41·6674·6572·······RemainAfter | |||
| 00041e80:·4578·6974·3d79·6573·0a20·2020·2020·2020··Exit=yes.······· | |||
| 00041e90:·2020·2020·205b·496e·7374·616c·6c5d·0a20·······[Install].· | |||
| 00041ea0:·2020·2020·2020·2020·2020·2057·616e·7465·············Wante | |||
| 00041eb0:·6442·793d·6d75·6c74·692d·7573·6572·2e74··dBy=multi-user.t | |||
| 00041ec0:·6172·6765·740a·3c2f·636f·6465·3e3c·2f70··arget.</code></p | |||
| 00041ed0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00041ee0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00041ef0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00041f00:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00041f10:·7461·7267·6574·3d22·2369·646d·3931·3930··target="#idm9190 | |||
| 00041f20:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00041f30:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00041f40:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00041f50:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00041f60:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00041f70:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00041 | 00041b70:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 00041 | 00041b80:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 00041 | 00041b90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00041 | 00041ba0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00041 | 00041bb0:·6522·2069·643d·2269·646d·3931·3839·223e··e"·id="idm9189"> | ||
| 00041 | 00041bc0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | ||
| 00041bd0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00041be0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 00041bf0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 00041c00:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 00041c10:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 00041c20:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 00041c30:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | |||
| 00041c40:·746f·5f70·6f6c·6963·7922·3e46·4950·533c··to_policy">FIPS< | |||
| 00041c50:·2f61·6262·723e·270a·0a0a·7374·6465·7272··/abbr>'...stderr | |||
| 00041c60:·5f6f·665f·6361·6c6c·3d24·2875·7064·6174··_of_call=$(updat | |||
| 00041c70:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 00041c80:·7320·2d2d·7365·7420·247b·7661·725f·7379··s·--set·${var_sy | |||
| 00041 | 00041c90:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00041ff0:·6379·3d27·3c61·6262·7220·7469·746c·653d··cy='<abbr·title= | |||
| 00042000:·2266·726f·6d20·5072·6f66·696c·652f·7265··"from·Profile/re | |||
| 00042010:·6669·6e65·2d76·616c·7565·3a20·7863·6364··fine-value:·xccd | |||
| 00042020:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | |||
| 00042030:·2e63·6f6e·7465·6e74·5f76·616c·7565·5f76··.content_value_v | |||
| 00042040:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 00042050:·5f70·6f6c·6963·7922·3e46·4950·533c·2f61··_policy">FIPS</a | |||
| 00042060:·6262·723e·270a·0a0a·7374·6465·7272·5f6f··bbr>'...stderr_o | |||
| 00042070:·665f·6361·6c6c·3d24·2875·7064·6174·652d··f_call=$(update- | |||
| 00042080:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 00042090:·2d2d·7365·7420·247b·7661·725f·7379·7374··--set·${var_syst | |||
| 000420a0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0004 | 00041ca0:·6379·7d20·3226·6774·3b26·616d·703b·3120··cy}·2>&1· | ||
| 0004 | 00041cb0:·2667·743b·202f·6465·762f·6e75·6c6c·290a··>·/dev/null). | ||
| 0004 | 00041cc0:·7263·3d24·3f0a·0a69·6620·7465·7374·2022··rc=$?..if·test·" | ||
| 0004 | 00041cd0:·2472·6322·203d·2031·3237·3b20·7468·656e··$rc"·=·127;·then | ||
| 0004 | 00041ce0:·0a09·6563·686f·2022·2473·7464·6572·725f··..echo·"$stderr_ | ||
| 0004 | 00041cf0:·6f66·5f63·616c·6c22·2026·6774·3b26·616d··of_call"·>&am | ||
| 0004 | 00041d00:·703b·320a·0965·6368·6f20·224d·616b·6520··p;2..echo·"Make· | ||
| 0004 | 00041d10:·7375·7265·2074·6861·7420·7468·6520·7363··sure·that·the·sc | ||
| Max diff block lines reached; 1999899/2017617 bytes (99.12%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:9 | 67 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 68 | ····*·cpe:/o:centos:centos:9 | 68 | ····*·cpe:/o:centos:centos:9 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 500, 14 lines modified | Offset 500, 33 lines modified | ||
| 500 | ··-·PCI-DSSv4-2.2.7 | 500 | ··-·PCI-DSSv4-2.2.7 |
| 501 | ··-·configure_crypto_policy | 501 | ··-·configure_crypto_policy |
| 502 | ··-·high_severity | 502 | ··-·high_severity |
| 503 | ··-·low_complexity | 503 | ··-·low_complexity |
| 504 | ··-·low_disruption | 504 | ··-·low_disruption |
| 505 | ··-·no_reboot_needed | 505 | ··-·no_reboot_needed |
| 506 | ··-·restrict_strategy | 506 | ··-·restrict_strategy |
| 507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 508 | var_system_crypto_policy='FIPS' | ||
| 509 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 510 | rc=$? | ||
| 511 | if·test·"$rc"·=·127;·then | ||
| 512 | » echo·"$stderr_of_call"·>&2 | ||
| 513 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 514 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 515 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 516 | » false··#·end·with·an·error·code | ||
| 517 | elif·test·"$rc"·!=·0;·then | ||
| 518 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 519 | » false··#·end·with·an·error·code | ||
| 520 | fi | ||
| 507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 521 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 508 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 522 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 509 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 523 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 510 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 524 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 511 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 525 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 512 | --- | 526 | --- |
| 513 | apiVersion:·machineconfiguration.openshift.io/v1 | 527 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 525, 33 lines modified | Offset 544, 14 lines modified | ||
| 525 | ············Before=kubelet.service | 544 | ············Before=kubelet.service |
| 526 | ············[Service] | 545 | ············[Service] |
| 527 | ············Type=oneshot | 546 | ············Type=oneshot |
| 528 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 547 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 529 | ············RemainAfterExit=yes | 548 | ············RemainAfterExit=yes |
| 530 | ············[Install] | 549 | ············[Install] |
| 531 | ············WantedBy=multi-user.target | 550 | ············WantedBy=multi-user.target |
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 533 | var_system_crypto_policy='FIPS' | ||
| 534 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 535 | rc=$? | ||
| 536 | if·test·"$rc"·=·127;·then | ||
| 537 | » echo·"$stderr_of_call"·>&2 | ||
| 538 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 539 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 540 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 541 | » false··#·end·with·an·error·code | ||
| 542 | elif·test·"$rc"·!=·0;·then | ||
| 543 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 544 | » false··#·end·with·an·error·code | ||
| 545 | fi | ||
| 546 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 551 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 547 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 552 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 548 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 553 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 549 | Severity: ··medium | 554 | Severity: ··medium |
| 550 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 555 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 551 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 556 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 552 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 557 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1513, 14 lines modified | Offset 1513, 25 lines modified | ||
| 1513 | ············_\x8c_\x8u_\x8i·····3.4.5 | 1513 | ············_\x8c_\x8u_\x8i·····3.4.5 |
| 1514 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1514 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1515 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1515 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1516 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1516 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1517 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1517 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1518 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1518 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1519 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule | 1519 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule |
| 1520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1521 | [customizations.services] | ||
| 1522 | masked·=·["debug-shell"] | ||
| 1523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1528 | service·disable·debug-shell | ||
| 1520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1525 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1534 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1526 | ····the·System | 1535 | ····the·System |
| Offset 1594, 44 lines modified | Offset 1605, 14 lines modified | ||
| 1594 | ··-·NIST-800-53-CM-6 | 1605 | ··-·NIST-800-53-CM-6 |
| 1595 | ··-·disable_strategy | 1606 | ··-·disable_strategy |
| 1596 | ··-·low_complexity | 1607 | ··-·low_complexity |
| 1597 | ··-·low_disruption | 1608 | ··-·low_disruption |
| 1598 | ··-·medium_severity | 1609 | ··-·medium_severity |
| 1599 | ··-·no_reboot_needed | 1610 | ··-·no_reboot_needed |
| 1600 | ··-·service_debug-shell_disabled | 1611 | ··-·service_debug-shell_disabled |
| 1601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1606 | service·disable·debug-shell | ||
| 1607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 126448/133164 bytes (94.96%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038610:·6173·206f·6620·3230·323 | 00038610:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 17198, 236 lines modified | Offset 17198, 236 lines modified | ||
| 000432d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 000432d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 000432e0:·2223·6964·6d38·3432·3822·2074·6162·696e··"#idm8428"·tabin | 000432e0:·2223·6964·6d38·3432·3822·2074·6162·696e··"#idm8428"·tabin | ||
| 000432f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 000432f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00043300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00043300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00043310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00043310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00043320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00043320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00043330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00043330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00043340:·3e52·656d·6564·6961·7469·6f6e·204 | 00043340:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00043350:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00043360:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00043370:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00043380:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00043390:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 00043350:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00043360:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00043370:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00043380:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00043390:·2269·646d·3834·3238·223e·3c74·6162·6c65··"idm8428"><table | |||
| 000433a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000433b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000433c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000433d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 000433e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 000433f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043400:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00043410:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00043420:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00043430:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00043440:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00043450:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00043460:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00043470:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00043480:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00043490:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 000434a0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 000434b0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 000434c0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 000434d0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 000434e0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 000434f0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00043500:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00043510:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00043520:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00043530:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00043540:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 00043550:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 00043560:·2d53·5449·472d·5248·454c·2d30·392d·3635··-STIG-RHEL-09-65 | |||
| 00043570:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 00043580:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 00043590:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 000435a0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 000435b0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 000435c0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 000435d0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 000435e0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 000435f0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00043600:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00043610:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00043620:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 00043630:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 00043640:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00043650:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00043660:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00043670:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00043680:·6172·6765·743d·2223·6964·6d38·3432·3922··arget="#idm8429" | |||
| 00043690:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000436a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000436b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000436c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000436d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000436e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 000436f0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 00043700:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00043710:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00043720:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00043730:·6d38·3432·3922·3e3c·7461·626c·6520·636c··m8429"><table·cl | |||
| 00043740:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00043750:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00043760:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00043770:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00043780:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00043790:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000437a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000437b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 000437c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000437d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000437e0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000437f0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00043800:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00043810:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00043 | 000433a0:·3238·223e·3c70·7265·3e3c·636f·6465·3e0a··28"><pre><code>. | ||
| 000433b0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 000433c0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 000433d0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 00043830:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 00043840:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 00043850:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00043860:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00043870:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00043880:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00043890:·6172·6765·743d·2223·6964·6d38·3433·3022··arget="#idm8430" | |||
| 000438a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000438b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000438c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000438d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000438e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000438f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00043900:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 00043910:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 00043920:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00043930:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| Max diff block lines reached; 2429671/2462017 bytes (98.69%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:9 | 65 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 66 | ····*·cpe:/o:centos:centos:9 | 66 | ····*·cpe:/o:centos:centos:9 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 576, 14 lines modified | Offset 576, 33 lines modified | ||
| 576 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 576 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 577 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 577 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 578 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 578 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 579 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 579 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 580 | ············_\x8c_\x8i_\x8s············6.1.1 | 580 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 581 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 581 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 582 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 582 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 584 | [[packages]] | ||
| 585 | name·=·"aide" | ||
| 586 | version·=·"*" | ||
| 587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 592 | package·--add=aide | ||
| 593 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 594 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 595 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 596 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 597 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 598 | package·install·aide | ||
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 600 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 601 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 602 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 603 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 588 | -·name:·Ensure·aide·is·installed | 604 | -·name:·Ensure·aide·is·installed |
| 589 | ··package: | 605 | ··package: |
| Offset 598, 26 lines modified | Offset 617, 14 lines modified | ||
| 598 | ··-·PCI-DSSv4-11.5.2 | 617 | ··-·PCI-DSSv4-11.5.2 |
| 599 | ··-·enable_strategy | 618 | ··-·enable_strategy |
| 600 | ··-·low_complexity | 619 | ··-·low_complexity |
| 601 | ··-·low_disruption | 620 | ··-·low_disruption |
| 602 | ··-·medium_severity | 621 | ··-·medium_severity |
| 603 | ··-·no_reboot_needed | 622 | ··-·no_reboot_needed |
| 604 | ··-·package_aide_installed | 623 | ··-·package_aide_installed |
| 605 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 606 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 607 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 608 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 609 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 610 | package·install·aide | ||
| 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 612 | [[packages]] | ||
| 613 | name·=·"aide" | ||
| 614 | version·=·"*" | ||
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 624 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 625 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 626 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 627 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 628 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 620 | #·Remediation·is·applicable·only·in·certain·platforms | 629 | #·Remediation·is·applicable·only·in·certain·platforms |
| 621 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 630 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 637, 21 lines modified | Offset 644, 14 lines modified | ||
| 637 | include·install_aide | 644 | include·install_aide |
| 638 | class·install_aide·{ | 645 | class·install_aide·{ |
| 639 | ··package·{·'aide': | 646 | ··package·{·'aide': |
| 640 | ····ensure·=>·'installed', | 647 | ····ensure·=>·'installed', |
| 641 | ··} | 648 | ··} |
| 642 | } | 649 | } |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 648 | package·--add=aide | ||
| 649 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 650 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 650 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 651 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 651 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. | 652 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. |
| 652 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 653 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 653 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 654 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 671, 14 lines modified | Offset 671, 18 lines modified | ||
| 671 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 671 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 672 | ············_\x8i_\x8s_\x8m······1446 | 672 | ············_\x8i_\x8s_\x8m······1446 |
| 673 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 673 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 674 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 674 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 675 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 675 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 676 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 676 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 679 | [customizations] | ||
| 680 | fips·=·true | ||
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 681 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 679 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 682 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 680 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 683 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 681 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 684 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 682 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 685 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 683 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 686 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 684 | ··set_fact: | 687 | ··set_fact: |
| Offset 778, 18 lines modified | Offset 782, 14 lines modified | ||
| 778 | ··-·NIST-800-53-SC-13 | 782 | ··-·NIST-800-53-SC-13 |
| 779 | ··-·enable_fips_mode | 783 | ··-·enable_fips_mode |
| 780 | ··-·high_severity | 784 | ··-·high_severity |
| 781 | ··-·medium_complexity | 785 | ··-·medium_complexity |
| 782 | ··-·medium_disruption | 786 | ··-·medium_disruption |
| 783 | ··-·reboot_required | 787 | ··-·reboot_required |
| 784 | ··-·restrict_strategy | 788 | ··-·restrict_strategy |
| 785 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 203448/209878 bytes (96.94%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038560:·6173·206f·6620·3230·323 | 00038560:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15614, 263 lines modified | Offset 15614, 263 lines modified | ||
| 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003cfe0:·2369·646d·3839·3834·2220·7461·6269·6e64··#idm8984"·tabind | 0003cfe0:·2369·646d·3839·3834·2220·7461·6269·6e64··#idm8984"·tabind | ||
| 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003d040:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003d050:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003d060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003d070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003d080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003d090:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | |||
| 0003d0a0:·3422·3e3c·7072·653e·3c63·6f64·653e·0a5b··4"><pre><code>.[ | |||
| 0003d0b0:·6375·7374·6f6d·697a·6174·696f·6e73·5d0a··customizations]. | |||
| 0003d0c0:·6669·7073·203d·2074·7275·650a·3c2f·636f··fips·=·true.</co | |||
| 0003d0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d120:·646d·3839·3835·2220·7461·6269·6e64·6578··dm8985"·tabindex | |||
| 0003d130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d | 0003d180:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003d | 0003d190:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003d | 0003d1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003d | 0003d1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003d | 0003d1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003d | 0003d1d0:·6d38·3938·3522·3e3c·7461·626c·6520·636c··m8985"><table·cl | ||
| 0003d | 0003d1e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003d | 0003d1f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003d | 0003d200:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003d | 0003d210:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003d | 0003d220:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003d | 0003d230:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003d240:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003d250:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003d260:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0003d270:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003d280:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003d | 0003d290:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003d110:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d120:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0003d130:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003d140:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003d150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d | 0003d2a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003d | 0003d2b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003d | 0003d2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003d | 0003d2d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003d | 0003d2e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003d | 0003d2f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003d | 0003d300:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003d | 0003d310:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003d | 0003d320:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003d | 0003d330:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003d | 0003d340:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | ||
| 0003d | 0003d350:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 0003d | 0003d360:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 0003d | 0003d370:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 0003d | 0003d380:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 0003d | 0003d390:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | ||
| 0003d | 0003d3a0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | ||
| 0003d | 0003d3b0:·5053·3a4f·5350·503c·2f61·6262·723e·0a20··PS:OSPP</abbr>.· | ||
| 0003d | 0003d3c0:·2074·6167·733a·0a20·2020·202d·2061·6c77···tags:.····-·alw | ||
| 0003d | 0003d3d0:·6179·730a·0a2d·206e·616d·653a·2045·6e61··ays..-·name:·Ena | ||
| 0003d | 0003d3e0:·626c·6520·4649·5053·204d·6f64·6520·2d20··ble·FIPS·Mode·-· | ||
| 0003d | 0003d3f0:·4368·6563·6b20·746f·2053·6565·2074·6865··Check·to·See·the | ||
| 0003d | 0003d400:·2043·7572·7265·6e74·2053·7461·7475·7320···Current·Status· | ||
| 0003d | 0003d410:·6f66·2046·4950·5320·4d6f·6465·0a20·2061··of·FIPS·Mode.··a | ||
| 0003d | 0003d420:·6e73·6962·6c65·2e62·7569·6c74·696e·2e63··nsible.builtin.c | ||
| 0003d | 0003d430:·6f6d·6d61·6e64·3a20·2f75·7372·2f62·696e··ommand:·/usr/bin | ||
| 0003d | 0003d440:·2f66·6970·732d·6d6f·6465·2d73·6574·7570··/fips-mode-setup | ||
| 0003d | 0003d450:·202d·2d63·6865·636b·0a20·2072·6567·6973···--check.··regis | ||
| 0003d | 0003d460:·7465·723a·2069·735f·6669·7073·5f65·6e61··ter:·is_fips_ena | ||
| 0003d | 0003d470:·626c·6564·0a20·2066·6169·6c65·645f·7768··bled.··failed_wh | ||
| 0003d | 0003d480:·656e·3a20·6661·6c73·650a·2020·6368·616e··en:·false.··chan | ||
| 0003d | 0003d490:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | ||
| 0003d | 0003d4a0:·2020·7768·656e·3a0a·2020·2d20·2820·616e····when:.··-·(·an | ||
| 0003d | 0003d4b0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 0003d | 0003d4c0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 0003d | 0003d4d0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 0003d | 0003d4e0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 0003d | 0003d4f0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 0003d | 0003d500:·7222·5d0a·2020·2020·616e·6420·6e6f·7420··r"].····and·not· | ||
| 0003d | 0003d510:·2820·6c6f·6f6b·7570·2822·656e·7622·2c20··(·lookup("env",· | ||
| 0003d | 0003d520:·2263·6f6e·7461·696e·6572·2229·203d·3d20··"container")·==· | ||
| 0003d | 0003d530:·2262·7772·6170·2d6f·7362·7569·6c64·2220··"bwrap-osbuild"· | ||
| 0003d | 0003d540:·2920·290a·2020·2d20·616e·7369·626c·655f··)·).··-·ansible_ | ||
| 0003d | 0003d550:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 0003d | 0003d560:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 0003d | 0003d570:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 0003d | 0003d580:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 0003d | 0003d590:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 0003d | 0003d5a0:·7461·6773·3a0a·2020·2d20·4449·5341·2d53··tags:.··-·DISA-S | ||
| 0003d | 0003d5b0:·5449·472d·5248·454c·2d30·392d·3637·3130··TIG-RHEL-09-6710 | ||
| 0003d | 0003d5c0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | ||
| 0003d490:·302d·3533·2d43·4d2d·3328·3629·0a20·202d··0-53-CM-3(6).··- | |||
| 0003d4a0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003d4b0:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 0003d4c0:·302d·3533·2d49·412d·370a·2020·2d20·4e49··0-53-IA-7.··-·NI | |||
| 0003d4d0:·5354·2d38·3030·2d35·332d·5343·2d31·320a··ST-800-53-SC-12. | |||
| 0003d4e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003d4f0:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003d500:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003d510:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003d520:·332d·5343·2d31·330a·2020·2d20·656e·6162··3-SC-13.··-·enab | |||
| Max diff block lines reached; 2640572/2676644 bytes (98.65%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 210, 14 lines modified | Offset 210, 18 lines modified | ||
| 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 211 | ············_\x8i_\x8s_\x8m······1446 | 211 | ············_\x8i_\x8s_\x8m······1446 |
| 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 218 | [customizations] | ||
| 219 | fips·=·true | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 222 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 225 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 223 | ··set_fact: | 226 | ··set_fact: |
| Offset 317, 18 lines modified | Offset 321, 14 lines modified | ||
| 317 | ··-·NIST-800-53-SC-13 | 321 | ··-·NIST-800-53-SC-13 |
| 318 | ··-·enable_fips_mode | 322 | ··-·enable_fips_mode |
| 319 | ··-·high_severity | 323 | ··-·high_severity |
| 320 | ··-·medium_complexity | 324 | ··-·medium_complexity |
| 321 | ··-·medium_disruption | 325 | ··-·medium_disruption |
| 322 | ··-·reboot_required | 326 | ··-·reboot_required |
| 323 | ··-·restrict_strategy | 327 | ··-·restrict_strategy |
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 325 | [customizations] | ||
| 326 | fips·=·true | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 328 | #·Remediation·is·applicable·only·in·certain·platforms | 329 | #·Remediation·is·applicable·only·in·certain·platforms |
| 329 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 330 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 330 | var_system_crypto_policy='FIPS:OSPP' | 331 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 367, 14 lines modified | Offset 367, 33 lines modified | ||
| 367 | $·sudo·dnf·install·crypto-policies | 367 | $·sudo·dnf·install·crypto-policies |
| 368 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 368 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 369 | Severity: ··medium | 369 | Severity: ··medium |
| 370 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 370 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 371 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 371 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 372 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 372 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 375 | [[packages]] | ||
| 376 | name·=·"crypto-policies" | ||
| 377 | version·=·"*" | ||
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 383 | package·--add=crypto-policies | ||
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 389 | package·install·crypto-policies | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 379 | -·name:·Ensure·crypto-policies·is·installed | 395 | -·name:·Ensure·crypto-policies·is·installed |
| 380 | ··package: | 396 | ··package: |
| Offset 384, 26 lines modified | Offset 403, 14 lines modified | ||
| 384 | ··-·DISA-STIG-RHEL-09-672010 | 403 | ··-·DISA-STIG-RHEL-09-672010 |
| 385 | ··-·enable_strategy | 404 | ··-·enable_strategy |
| 386 | ··-·low_complexity | 405 | ··-·low_complexity |
| 387 | ··-·low_disruption | 406 | ··-·low_disruption |
| 388 | ··-·medium_severity | 407 | ··-·medium_severity |
| 389 | ··-·no_reboot_needed | 408 | ··-·no_reboot_needed |
| 390 | ··-·package_crypto-policies_installed | 409 | ··-·package_crypto-policies_installed |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 396 | package·install·crypto-policies | ||
| 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 398 | [[packages]] | ||
| 399 | name·=·"crypto-policies" | ||
| 400 | version·=·"*" | ||
| 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 402 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 411 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 403 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 412 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 404 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 413 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 405 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 414 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 406 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 415 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 417, 21 lines modified | Offset 424, 14 lines modified | ||
| 417 | include·install_crypto-policies | 424 | include·install_crypto-policies |
| 418 | class·install_crypto-policies·{ | 425 | class·install_crypto-policies·{ |
| 419 | ··package·{·'crypto-policies': | 426 | ··package·{·'crypto-policies': |
| 420 | ····ensure·=>·'installed', | 427 | ····ensure·=>·'installed', |
| 421 | ··} | 428 | ··} |
| 422 | } | 429 | } |
| 423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 424 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 425 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 426 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 427 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 356909/363031 bytes (98.31%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038550:·2020·2020·2028·6173·206f·6620·3230·323 | 00038550:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038560:·2d31·3 | 00038560:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16533, 236 lines modified | Offset 16533, 236 lines modified | ||
| 00040940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 00040940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00040950:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 00040950:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 00040960:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00040960:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00040970:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00040970:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00040980:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00040980:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00040990:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00040990:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 000409a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 000409a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 000409b0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 000409c0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 000409d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 000409e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000409f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040a00:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 00040a10:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00040a20:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00040a30:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00040a40:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00040a50:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00040a60:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040a70:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00040a80:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040a90:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040aa0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040ab0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040ac0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040ad0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00040ae0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040af0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040b00:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00040b10:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 00040b20:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 00040b30:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 00040b40:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 00040b50:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 00040b60:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00040b70:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00040b80:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00040b90:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00040ba0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00040bb0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 00040bc0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00040bd0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 00040be0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 00040bf0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00040c00:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 00040c10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 00040c20:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 00040c30:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00040c40:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00040c50:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00040c60:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00040c70:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00040c80:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00040c90:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 00040ca0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00040cb0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040cc0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040cd0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040ce0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00040cf0:·7267·6574·3d22·2369·646d·3834·3239·2220··rget="#idm8429"· | |||
| 00040d00:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00040d10:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00040d20:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040d30:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040d40:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040d50:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040d60:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 00040d70:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040d80:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040d90:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040da0:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 00040db0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040dc0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040dd0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040de0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040df0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040e00:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040e10:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040e20:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040e30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040e40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040e50:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040e60:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00040e70:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00040e80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00040e90:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 00040ea0:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 00040eb0:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 00040ec0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040ed0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040ee0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040ef0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00040f00:·7267·6574·3d22·2369·646d·3834·3330·2220··rget="#idm8430"· | |||
| 00040f10:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00040f20:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00040f30:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040f40:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040f50:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040f60:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040f70:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00040f80:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00040f90:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040fa0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040fb0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040fc0:·6964·6d38·3433·3022·3e3c·7072·653e·3c63··idm8430"><pre><c | |||
| 00040fd0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 00040fe0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 00040ff0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 00041000:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041010:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| Max diff block lines reached; 2848589/2881073 bytes (98.87%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 432, 14 lines modified | Offset 432, 33 lines modified | ||
| 432 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 432 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 433 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 433 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 435 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 435 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 436 | ············_\x8c_\x8i_\x8s············6.1.1 | 436 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 440 | [[packages]] | ||
| 441 | name·=·"aide" | ||
| 442 | version·=·"*" | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package·--add=aide | ||
| 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 454 | package·install·aide | ||
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 444 | -·name:·Ensure·aide·is·installed | 460 | -·name:·Ensure·aide·is·installed |
| 445 | ··package: | 461 | ··package: |
| Offset 454, 26 lines modified | Offset 473, 14 lines modified | ||
| 454 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 455 | ··-·enable_strategy | 474 | ··-·enable_strategy |
| 456 | ··-·low_complexity | 475 | ··-·low_complexity |
| 457 | ··-·low_disruption | 476 | ··-·low_disruption |
| 458 | ··-·medium_severity | 477 | ··-·medium_severity |
| 459 | ··-·no_reboot_needed | 478 | ··-·no_reboot_needed |
| 460 | ··-·package_aide_installed | 479 | ··-·package_aide_installed |
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 462 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 463 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 464 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 465 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 466 | package·install·aide | ||
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | [[packages]] | ||
| 469 | name·=·"aide" | ||
| 470 | version·=·"*" | ||
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 476 | #·Remediation·is·applicable·only·in·certain·platforms | 485 | #·Remediation·is·applicable·only·in·certain·platforms |
| 477 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 493, 21 lines modified | Offset 500, 14 lines modified | ||
| 493 | include·install_aide | 500 | include·install_aide |
| 494 | class·install_aide·{ | 501 | class·install_aide·{ |
| 495 | ··package·{·'aide': | 502 | ··package·{·'aide': |
| 496 | ····ensure·=>·'installed', | 503 | ····ensure·=>·'installed', |
| 497 | ··} | 504 | ··} |
| 498 | } | 505 | } |
| 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 504 | package·--add=aide | ||
| 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 506 | Run·the·following·command·to·generate·a·new·database: | 507 | Run·the·following·command·to·generate·a·new·database: |
| 507 | $·sudo·/usr/sbin/aide·--init | 508 | $·sudo·/usr/sbin/aide·--init |
| 508 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 509 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 509 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 510 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 510 | To·initiate·a·manual·check,·run·the·following·command: | 511 | To·initiate·a·manual·check,·run·the·following·command: |
| 511 | $·sudo·/usr/sbin/aide·--check | 512 | $·sudo·/usr/sbin/aide·--check |
| Offset 862, 14 lines modified | Offset 862, 33 lines modified | ||
| 862 | ··-·PCI-DSSv4-2.2.7 | 862 | ··-·PCI-DSSv4-2.2.7 |
| 863 | ··-·configure_crypto_policy | 863 | ··-·configure_crypto_policy |
| 864 | ··-·high_severity | 864 | ··-·high_severity |
| 865 | ··-·low_complexity | 865 | ··-·low_complexity |
| 866 | ··-·low_disruption | 866 | ··-·low_disruption |
| 867 | ··-·no_reboot_needed | 867 | ··-·no_reboot_needed |
| 868 | ··-·restrict_strategy | 868 | ··-·restrict_strategy |
| 869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 870 | var_system_crypto_policy='DEFAULT' | ||
| 871 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 872 | rc=$? | ||
| 873 | if·test·"$rc"·=·127;·then | ||
| 874 | » echo·"$stderr_of_call"·>&2 | ||
| 875 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 876 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 877 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 878 | » false··#·end·with·an·error·code | ||
| 879 | elif·test·"$rc"·!=·0;·then | ||
| 880 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 881 | » false··#·end·with·an·error·code | ||
| 882 | fi | ||
| 869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 883 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 884 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 222184/227807 bytes (97.53%) of diff not shown. | |||
| Offset 14425, 15 lines modified | Offset 14425, 15 lines modified | ||
| 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385f0:·3230·323 | 000385f0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15227, 236 lines modified | Offset 15227, 236 lines modified | ||
| 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b810:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b820:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b830:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b840:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b850:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b860:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b870:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b880:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b890:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b8a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b8b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b8c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b8d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b8e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b8f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b900:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b910:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b920:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b930:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b940:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b950:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b960:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b970:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b980:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b990:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b9a0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b9b0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b9c0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b9d0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b9e0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b9f0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003ba00:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003ba10:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003ba20:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003ba30:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003ba40:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003ba50:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003ba60:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003ba70:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ba80:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ba90:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003baa0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bab0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bac0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bad0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bae0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003baf0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bb00:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003bb10:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bb20:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bb30:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bb40:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bb50:·7267·6574·3d22·2369·646d·3834·3239·2220··rget="#idm8429"· | |||
| 0003bb60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bba0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bbb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bbc0:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003bbd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bbe0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bbf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bc00:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 0003bc10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bc20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bc30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bc40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bc50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bc60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bc70:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bc80:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bc90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bca0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bcb0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bcc0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bcd0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bce0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bcf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003bd00:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 0003bd10:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003bd20:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bd30:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bd40:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bd50:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bd60:·7267·6574·3d22·2369·646d·3834·3330·2220··rget="#idm8430"· | |||
| 0003bd70:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bd80:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bd90:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bda0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bdb0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bdc0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bdd0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bde0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bdf0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003be00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003be10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003be20:·6964·6d38·3433·3022·3e3c·7072·653e·3c63··idm8430"><pre><c | |||
| 0003be30:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003be40:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003be50:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003be60:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003be70:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003be80:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| Max diff block lines reached; 5536894/5569240 bytes (99.42%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 |
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 63 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 63 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 65 | ····*·cpe:/o:centos:centos:9 | 65 | ····*·cpe:/o:centos:centos:9 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 125, 14 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8c_\x8i_\x8s············6.1.1 | 129 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·install·aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 153 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 154 | ··package: |
| Offset 147, 26 lines modified | Offset 166, 14 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 168 | ··-·low_complexity |
| 150 | ··-·low_disruption | 169 | ··-·low_disruption |
| 151 | ··-·medium_severity | 170 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·install·aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | 178 | #·Remediation·is·applicable·only·in·certain·platforms |
| 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 186, 21 lines modified | Offset 193, 14 lines modified | ||
| 186 | include·install_aide | 193 | include·install_aide |
| 187 | class·install_aide·{ | 194 | class·install_aide·{ |
| 188 | ··package·{·'aide': | 195 | ··package·{·'aide': |
| 189 | ····ensure·=>·'installed', | 196 | ····ensure·=>·'installed', |
| 190 | ··} | 197 | ··} |
| 191 | } | 198 | } |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·--add=aide | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 204 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 205 | $·sudo·/usr/sbin/aide·--check |
| Offset 1921, 14 lines modified | Offset 1921, 18 lines modified | ||
| 1921 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1921 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1922 | ············_\x8i_\x8s_\x8m······1446 | 1922 | ············_\x8i_\x8s_\x8m······1446 |
| 1923 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1923 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1924 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1924 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1925 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1925 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1926 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1926 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1927 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 1927 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1929 | [customizations] | ||
| 1930 | fips·=·true | ||
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1931 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1929 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1932 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1930 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1933 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1931 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1934 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1932 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1935 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1933 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1936 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1934 | ··set_fact: | 1937 | ··set_fact: |
| Offset 2028, 18 lines modified | Offset 2032, 14 lines modified | ||
| 2028 | ··-·NIST-800-53-SC-13 | 2032 | ··-·NIST-800-53-SC-13 |
| 2029 | ··-·enable_fips_mode | 2033 | ··-·enable_fips_mode |
| 2030 | ··-·high_severity | 2034 | ··-·high_severity |
| 2031 | ··-·medium_complexity | 2035 | ··-·medium_complexity |
| 2032 | ··-·medium_disruption | 2036 | ··-·medium_disruption |
| 2033 | ··-·reboot_required | 2037 | ··-·reboot_required |
| 2034 | ··-·restrict_strategy | 2038 | ··-·restrict_strategy |
| 2035 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 511631/517662 bytes (98.83%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038760:·2020·2020·2028·6173·206f·6620·3230·323 | 00038760:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038770:·2d31·3 | 00038770:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15246, 235 lines modified | Offset 15246, 235 lines modified | ||
| 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | ||
| 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b940:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b950:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b960:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b970:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b980:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b990:·643d·2269·646d·3834·3238·223e·3c70·7265··d="idm8428"><pre | |||
| 0003b940:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b950:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b960:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b970:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b980:·7073·6522·2069·643d·2269·646d·3834·3238··pse"·id="idm8428 | |||
| 0003b990:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b9a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b9b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b9c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b9d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b9e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ba10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ba30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ba40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba80:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003ba90:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003baa0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bab0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bac0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bad0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bae0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003baf0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003bb00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003bb10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003bb20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003bb30:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003bb40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bb50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bb60:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003bb70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bb80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bb90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bba0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bbb0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bbc0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bbd0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bbe0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bbf0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bc00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bc10:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bc20:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003bc30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bc40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bc50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bc60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bc70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bc80:·6964·6d38·3432·3922·2074·6162·696e·6465··idm8429"·tabinde | |||
| 0003bc90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bcb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bcc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bcd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bce0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003bcf0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bd00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bd10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bd20:·2220·6964·3d22·6964·6d38·3432·3922·3e3c··"·id="idm8429">< | |||
| 0003bd30:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bd40:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bd50:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bd60:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bd70:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bd80:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bd90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bda0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bdb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bdc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bdd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bde0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bdf0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003be00:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003be10:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b | 0003b9a0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003b9b0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b9c0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003be30:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003be40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003be50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003be60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003be70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003be80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003be90:·6964·6d38·3433·3022·2074·6162·696e·6465··idm8430"·tabinde | |||
| 0003bea0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003beb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bec0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bed0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bee0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bef0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003bf00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003bf10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bf20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| Max diff block lines reached; 5467461/5499807 bytes (99.41%) of diff not shown. | |||
| Offset 67, 15 lines modified | Offset 67, 15 lines modified | ||
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 |
| 68 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 68 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 69 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 69 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 70 | ····*·cpe:/o:redhat:enterprise_linux:9 | 70 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 71 | ····*·cpe:/o:centos:centos:9 | 71 | ····*·cpe:/o:centos:centos:9 |
| 72 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 73 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 73 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 74 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 74 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 75 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 76 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 77 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 78 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 78 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 79 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 80 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 81 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 81 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 130, 14 lines modified | Offset 130, 33 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············6.1.1 | 134 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 143 | ··package: | 159 | ··package: |
| Offset 152, 26 lines modified | Offset 171, 14 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 171 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 172 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 173 | ··-·low_complexity |
| 155 | ··-·low_disruption | 174 | ··-·low_disruption |
| 156 | ··-·medium_severity | 175 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·install·aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | 183 | #·Remediation·is·applicable·only·in·certain·platforms |
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 184 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 191, 21 lines modified | Offset 198, 14 lines modified | ||
| 191 | include·install_aide | 198 | include·install_aide |
| 192 | class·install_aide·{ | 199 | class·install_aide·{ |
| 193 | ··package·{·'aide': | 200 | ··package·{·'aide': |
| 194 | ····ensure·=>·'installed', | 201 | ····ensure·=>·'installed', |
| 195 | ··} | 202 | ··} |
| 196 | } | 203 | } |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 202 | package·--add=aide | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 208 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 209 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 1926, 14 lines modified | Offset 1926, 18 lines modified | ||
| 1926 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1926 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1927 | ············_\x8i_\x8s_\x8m······1446 | 1927 | ············_\x8i_\x8s_\x8m······1446 |
| 1928 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1928 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1929 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1929 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1930 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1930 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1931 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1931 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1932 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 1932 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1934 | [customizations] | ||
| 1935 | fips·=·true | ||
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1934 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1937 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1935 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1938 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1936 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1939 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1937 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1940 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1938 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1941 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1939 | ··set_fact: | 1942 | ··set_fact: |
| Offset 2033, 18 lines modified | Offset 2037, 14 lines modified | ||
| 2033 | ··-·NIST-800-53-SC-13 | 2037 | ··-·NIST-800-53-SC-13 |
| 2034 | ··-·enable_fips_mode | 2038 | ··-·enable_fips_mode |
| 2035 | ··-·high_severity | 2039 | ··-·high_severity |
| 2036 | ··-·medium_complexity | 2040 | ··-·medium_complexity |
| 2037 | ··-·medium_disruption | 2041 | ··-·medium_disruption |
| 2038 | ··-·reboot_required | 2042 | ··-·reboot_required |
| 2039 | ··-·restrict_strategy | 2043 | ··-·restrict_strategy |
| 2040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 502909/508953 bytes (98.81%) of diff not shown. | |||
| Offset 14354, 15 lines modified | Offset 14354, 15 lines modified | ||
| 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038180:·7320·6f66·2032·3032·3 | 00038180:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15508, 130 lines modified | Offset 15508, 130 lines modified | ||
| 0003c930:·2d74·6172·6765·743d·2223·6964·6d32·3533··-target="#idm253 | 0003c930:·2d74·6172·6765·743d·2223·6964·6d32·3533··-target="#idm253 | ||
| 0003c940:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | 0003c940:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | ||
| 0003c950:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003c950:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c960:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003c960:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c970:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003c970:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c980:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003c980:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c990:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003c990:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c9a0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003c9b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c9c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c9d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c9e0:·2220·6964·3d22·6964·6d32·3533·3422·3e3c··"·id="idm2534">< | |||
| 0003c9f0:·7072·653e·3c63·6f64·653e·0a76·6172·5f73··pre><code>.var_s | |||
| 0003ca00:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003ca10:·6963·793d·273c·6162·6272·2074·6974·6c65··icy='<abbr·title | |||
| 0003ca20:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | |||
| 0003ca30:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | |||
| 0003ca40:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | |||
| 0003ca50:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | |||
| 0003ca60:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003ca70:·6f5f·706f·6c69·6379·223e·4445·4641·554c··o_policy">DEFAUL | |||
| 0003ca80:·543c·2f61·6262·723e·270a·0a0a·7374·6465··T</abbr>'...stde | |||
| 0003ca90:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | |||
| 0003c9a0:·7469·6f6e·204b·7562·6572·6e65·7465·7320··tion·Kubernetes· | |||
| 0003c9b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c9c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c9d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c9e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003c9f0:·3533·3422·3e3c·7461·626c·6520·636c·6173··534"><table·clas | |||
| 0003ca00:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ca10:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ca20:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ca30:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ca40:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ca50:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ca60:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ca70:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ca80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ca90:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003caa0:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | |||
| 0003cab0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003cac0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003cad0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003cae0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d2d··le><pre><code>-- | |||
| 0003caf0:·2d0a·6170·6956·6572·7369·6f6e·3a20·6d61··-.apiVersion:·ma | |||
| 0003cb00:·6368·696e·6563·6f6e·6669·6775·7261·7469··chineconfigurati | |||
| 0003cb10:·6f6e·2e6f·7065·6e73·6869·6674·2e69·6f2f··on.openshift.io/ | |||
| 0003cb20:·7631·0a6b·696e·643a·204d·6163·6869·6e65··v1.kind:·Machine | |||
| 0003cb30:·436f·6e66·6967·0a73·7065·633a·0a20·2063··Config.spec:.··c | |||
| 0003cb40:·6f6e·6669·673a·0a20·2020·2069·676e·6974··onfig:.····ignit | |||
| 0003cb50:·696f·6e3a·0a20·2020·2020·2076·6572·7369··ion:.······versi | |||
| 0003cb60:·6f6e·3a20·332e·312e·300a·2020·2020·7379··on:·3.1.0.····sy | |||
| 0003cb70:·7374·656d·643a·0a20·2020·2020·2075·6e69··stemd:.······uni | |||
| 0003cb80:·7473·3a0a·2020·2020·2020·2020·2d20·6e61··ts:.········-·na | |||
| 0003cb90:·6d65·3a20·636f·6e66·6967·7572·652d·6372··me:·configure-cr | |||
| 0003cba0:·7970·746f·2d70·6f6c·6963·792e·7365·7276··ypto-policy.serv | |||
| 0003cbb0:·6963·650a·2020·2020·2020·2020·2020·656e··ice.··········en | |||
| 0003cbc0:·6162·6c65·643a·2074·7275·650a·2020·2020··abled:·true.···· | |||
| 0003cbd0:·2020·2020·2020·636f·6e74·656e·7473·3a20········contents:· | |||
| 0003cbe0:·7c0a·2020·2020·2020·2020·2020·2020·5b55··|.············[U | |||
| 0003cbf0:·6e69·745d·0a20·2020·2020·2020·2020·2020··nit].··········· | |||
| 0003cc00:·2042·6566·6f72·653d·6b75·6265·6c65·742e···Before=kubelet. | |||
| 0003cc10:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 0003cc20:·2020·2020·5b53·6572·7669·6365·5d0a·2020······[Service].·· | |||
| 0003cc30:·2020·2020·2020·2020·2020·5479·7065·3d6f············Type=o | |||
| 0003cc40:·6e65·7368·6f74·0a20·2020·2020·2020·2020··neshot.········· | |||
| 0003cc50:·2020·2045·7865·6353·7461·7274·3d75·7064·····ExecStart=upd | |||
| 0003c | 0003caa0:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | ||
| 0003c | 0003cab0:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | ||
| 0003cc80:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003cc90:·6f6c·6963·797d·7d0a·2020·2020·2020·2020··olicy}}.········ | |||
| 0003cca0:·2020·2020·5265·6d61·696e·4166·7465·7245······RemainAfterE | |||
| 0003ccb0:·7869·743d·7965·730a·2020·2020·2020·2020··xit=yes.········ | |||
| 0003ccc0:·2020·2020·5b49·6e73·7461·6c6c·5d0a·2020······[Install].·· | |||
| 0003ccd0:·2020·2020·2020·2020·2020·5761·6e74·6564············Wanted | |||
| 0003cce0:·4279·3d6d·756c·7469·2d75·7365·722e·7461··By=multi-user.ta | |||
| 0003ccf0:·7267·6574·0a3c·2f63·6f64·653e·3c2f·7072··rget.</code></pr | |||
| 0003cd00:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003cd10:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003cd20:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003cd30:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003cd40:·6172·6765·743d·2223·6964·6d32·3533·3522··arget="#idm2535" | |||
| 0003cd50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003cd60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003cd70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003cd80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003cd90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003cda0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003cdb0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003cdc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003cdd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003cde0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003cdf0:·6964·3d22·6964·6d32·3533·3522·3e3c·7072··id="idm2535"><pr | |||
| 0003ce00:·653e·3c63·6f64·653e·0a76·6172·5f73·7973··e><code>.var_sys | |||
| 0003ce10:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003ce20:·793d·273c·6162·6272·2074·6974·6c65·3d22··y='<abbr·title=" | |||
| 0003ce30:·6672·6f6d·2050·726f·6669·6c65·2f72·6566··from·Profile/ref | |||
| 0003ce40:·696e·652d·7661·6c75·653a·2078·6363·6466··ine-value:·xccdf | |||
| 0003ce50:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | |||
| 0003ce60:·636f·6e74·656e·745f·7661·6c75·655f·7661··content_value_va | |||
| 0003c | 0003cac0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003ce80:·706f·6c69·6379·223e·4445·4641·554c·543c··policy">DEFAULT< | |||
| 0003ce90:·2f61·6262·723e·270a·0a0a·7374·6465·7272··/abbr>'...stderr | |||
| 0003cea0:·5f6f·665f·6361·6c6c·3d24·2875·7064·6174··_of_call=$(updat | |||
| 0003ceb0:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003cec0:·7320·2d2d·7365·7420·247b·7661·725f·7379··s·--set·${var_sy | |||
| 0003ced0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003c | 0003cad0:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | ||
| 0003c | 0003cae0:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | ||
| 0003cf00 | 0003caf0:·290a·7263·3d24·3f0a·0a69·6620·7465·7374··).rc=$?..if·test | ||
| 0003c | 0003cb00:·2022·2472·6322·203d·2031·3237·3b20·7468···"$rc"·=·127;·th | ||
| Max diff block lines reached; 3925960/3943678 bytes (99.55%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 183, 14 lines modified | Offset 183, 33 lines modified | ||
| 183 | ··-·PCI-DSSv4-2.2.7 | 183 | ··-·PCI-DSSv4-2.2.7 |
| 184 | ··-·configure_crypto_policy | 184 | ··-·configure_crypto_policy |
| 185 | ··-·high_severity | 185 | ··-·high_severity |
| 186 | ··-·low_complexity | 186 | ··-·low_complexity |
| 187 | ··-·low_disruption | 187 | ··-·low_disruption |
| 188 | ··-·no_reboot_needed | 188 | ··-·no_reboot_needed |
| 189 | ··-·restrict_strategy | 189 | ··-·restrict_strategy |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | var_system_crypto_policy='DEFAULT' | ||
| 192 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 193 | rc=$? | ||
| 194 | if·test·"$rc"·=·127;·then | ||
| 195 | » echo·"$stderr_of_call"·>&2 | ||
| 196 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 197 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 198 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | elif·test·"$rc"·!=·0;·then | ||
| 201 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 202 | » false··#·end·with·an·error·code | ||
| 203 | fi | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 195 | --- | 209 | --- |
| 196 | apiVersion:·machineconfiguration.openshift.io/v1 | 210 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 208, 33 lines modified | Offset 227, 14 lines modified | ||
| 208 | ············Before=kubelet.service | 227 | ············Before=kubelet.service |
| 209 | ············[Service] | 228 | ············[Service] |
| 210 | ············Type=oneshot | 229 | ············Type=oneshot |
| 211 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 230 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 212 | ············RemainAfterExit=yes | 231 | ············RemainAfterExit=yes |
| 213 | ············[Install] | 232 | ············[Install] |
| 214 | ············WantedBy=multi-user.target | 233 | ············WantedBy=multi-user.target |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | var_system_crypto_policy='DEFAULT' | ||
| 217 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 218 | rc=$? | ||
| 219 | if·test·"$rc"·=·127;·then | ||
| 220 | » echo·"$stderr_of_call"·>&2 | ||
| 221 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 222 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 223 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 224 | » false··#·end·with·an·error·code | ||
| 225 | elif·test·"$rc"·!=·0;·then | ||
| 226 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 227 | » false··#·end·with·an·error·code | ||
| 228 | fi | ||
| 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 | 235 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 |
| 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. | 236 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 232 | Severity: ··medium | 237 | Severity: ··medium |
| 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy | 238 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy |
| 234 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 | 239 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 |
| 235 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) | 240 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) |
| Offset 774, 14 lines modified | Offset 774, 33 lines modified | ||
| 774 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 774 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 775 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 775 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 776 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 776 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 777 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 777 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 778 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 778 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 779 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 779 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 780 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 780 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 781 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 782 | [[packages]] | ||
| 783 | name·=·"sudo" | ||
| 784 | version·=·"*" | ||
| 785 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 786 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 787 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 788 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 789 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 790 | package·--add=sudo | ||
| 791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 792 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 793 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 794 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 795 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 796 | package·install·sudo | ||
| 781 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 782 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 783 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 784 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 785 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 786 | -·name:·Ensure·sudo·is·installed | 802 | -·name:·Ensure·sudo·is·installed |
| 787 | ··package: | 803 | ··package: |
| Offset 793, 26 lines modified | Offset 812, 14 lines modified | ||
| 793 | ··-·PCI-DSSv4-2.2.6 | 812 | ··-·PCI-DSSv4-2.2.6 |
| 794 | ··-·enable_strategy | 813 | ··-·enable_strategy |
| 795 | ··-·low_complexity | 814 | ··-·low_complexity |
| 796 | ··-·low_disruption | 815 | ··-·low_disruption |
| 797 | ··-·medium_severity | 816 | ··-·medium_severity |
| 798 | ··-·no_reboot_needed | 817 | ··-·no_reboot_needed |
| 799 | ··-·package_sudo_installed | 818 | ··-·package_sudo_installed |
| 800 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 801 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 301935/308043 bytes (98.02%) of diff not shown. | |||
| Offset 14376, 16 lines modified | Offset 14376, 16 lines modified | ||
| 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000382e0:·2020·2020·2028·6173·206f·6620·3230·323 | 000382e0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 000382f0:·2d31·3 | 000382f0:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15900, 256 lines modified | Offset 15900, 256 lines modified | ||
| 0003e1b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003e1b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003e1c0:·646d·3233·3733·2220·7461·6269·6e64·6578··dm2373"·tabindex | 0003e1c0:·646d·3233·3733·2220·7461·6269·6e64·6578··dm2373"·tabindex | ||
| 0003e1d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003e1d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003e1e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003e1e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003e1f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003e1f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003e200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003e200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003e210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003e210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003e220:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003e230:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003e240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003e250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e270:·7365·2220·6964·3d22·6964·6d32·3337·3322··se"·id="idm2373" | |||
| 0003e280:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 0003e290:·7374·6f6d·697a·6174·696f·6e73·5d0a·6669··stomizations].fi | |||
| 0003e2a0:·7073·203d·2074·7275·650a·3c2f·636f·6465··ps·=·true.</code | |||
| 0003e2b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003e2c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003e2d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003e2e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003e2f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003e300:·3233·3734·2220·7461·6269·6e64·6578·3d22··2374"·tabindex=" | |||
| 0003e310:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003e320:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003e330:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003e340:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003e350:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e | 0003e360:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003e | 0003e370:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003e | 0003e380:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003e | 0003e390:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003e | 0003e3a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0003e | 0003e3b0:·3337·3422·3e3c·7461·626c·6520·636c·6173··374"><table·clas | ||
| 0003e | 0003e3c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003e | 0003e3d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003e | 0003e3e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003e | 0003e3f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003e | 0003e400:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003e | 0003e410:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003e | 0003e420:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003e | 0003e430:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003e | 0003e440:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003e | 0003e450:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003e | 0003e460:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | ||
| 0003e | 0003e470:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003e | 0003e480:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003e | 0003e490:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003e | 0003e4a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003e | 0003e4b0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | ||
| 0003e | 0003e4c0:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 0003e | 0003e4d0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003e | 0003e4e0:·2023·2070·726f·6d6f·7465·2074·6f20·7661···#·promote·to·va | ||
| 0003e | 0003e4f0:·7269·6162·6c65·0a20·2073·6574·5f66·6163··riable.··set_fac | ||
| 0003e | 0003e500:·743a·0a20·2020·2076·6172·5f73·7973·7465··t:.····var_syste | ||
| 0003e | 0003e510:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | ||
| 0003e | 0003e520:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | ||
| 0003e | 0003e530:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | ||
| 0003e | 0003e540:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | ||
| 0003e | 0003e550:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 0003e | 0003e560:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | ||
| 0003e | 0003e570:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | ||
| 0003e | 0003e580:·7074·6f5f·706f·6c69·6379·223e·4649·5053··pto_policy">FIPS | ||
| 0003e | 0003e590:·3c2f·6162·6272·3e0a·2020·7461·6773·3a0a··</abbr>.··tags:. | ||
| 0003e | 0003e5a0:·2020·2020·2d20·616c·7761·7973·0a0a·2d20······-·always..-· | ||
| 0003e5b0:·6e61·6d65·3a20·456e·6162·6c65·2046·4950··name:·Enable·FIP | |||
| 0003e5c0:·5320·4d6f·6465·202d·2043·6865·636b·2074··S·Mode·-·Check·t | |||
| 0003e5d0:·6f20·5365·6520·7468·6520·4375·7272·656e··o·See·the·Curren | |||
| 0003e5e0:·7420·5374·6174·7573·206f·6620·4649·5053··t·Status·of·FIPS | |||
| 0003e5f0:·204d·6f64·650a·2020·616e·7369·626c·652e···Mode.··ansible. | |||
| 0003e600:·6275·696c·7469·6e2e·636f·6d6d·616e·643a··builtin.command: | |||
| 0003e610:·202f·7573·722f·6269·6e2f·6669·7073·2d6d···/usr/bin/fips-m | |||
| 0003e620:·6f64·652d·7365·7475·7020·2d2d·6368·6563··ode-setup·--chec | |||
| 0003e630:·6b0a·2020·7265·6769·7374·6572·3a20·6973··k.··register:·is | |||
| 0003e640:·5f66·6970·735f·656e·6162·6c65·640a·2020··_fips_enabled.·· | |||
| 0003e650:·6661·696c·6564·5f77·6865·6e3a·2066·616c··failed_when:·fal | |||
| 0003e660:·7365·0a20·2063·6861·6e67·6564·5f77·6865··se.··changed_whe | |||
| 0003e670:·6e3a·2066·616c·7365·0a20·2077·6865·6e3a··n:·false.··when: | |||
| 0003e680:·0a20·202d·2028·2061·6e73·6962·6c65·5f76··.··-·(·ansible_v | |||
| 0003e690:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003e6a0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003e6b0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003e6c0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003e6d0:·2263·6f6e·7461·696e·6572·225d·0a20·2020··"container"].··· | |||
| 0003e6e0:·2061·6e64·206e·6f74·2028·206c·6f6f·6b75···and·not·(·looku | |||
| 0003e6f0:·7028·2265·6e76·222c·2022·636f·6e74·6169··p("env",·"contai | |||
| 0003e700:·6e65·7222·2920·3d3d·2022·6277·7261·702d··ner")·==·"bwrap- | |||
| 0003e710:·6f73·6275·696c·6422·2029·2029·0a20·202d··osbuild"·)·).··- | |||
| 0003e720:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003e730:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003e740:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003e750:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003e760:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003e770:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003e780:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003e790:·4d2d·3328·3629·0a20·202d·204e·4953·542d··M-3(6).··-·NIST- | |||
| 0003e7a0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003e7b0:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | |||
| 0003e7c0:·412d·370a·2020·2d20·4e49·5354·2d38·3030··A-7.··-·NIST-800 | |||
| 0003e7d0:·2d35·332d·5343·2d31·320a·2020·2d20·4e49··-53-SC-12.··-·NI | |||
| 0003e7e0:·5354·2d38·3030·2d35·332d·5343·2d31·3228··ST-800-53-SC-12( | |||
| 0003e7f0:·3229·0a20·202d·204e·4953·542d·3830·302d··2).··-·NIST-800- | |||
| 0003e800:·3533·2d53·432d·3132·2833·290a·2020·2d20··53-SC-12(3).··-· | |||
| 0003e810:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003e820:·330a·2020·2d20·656e·6162·6c65·5f66·6970··3.··-·enable_fip | |||
| 0003e830:·735f·6d6f·6465·0a20·202d·2068·6967·685f··s_mode.··-·high_ | |||
| 0003e840:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | |||
| 0003e850:·6975·6d5f·636f·6d70·6c65·7869·7479·0a20··ium_complexity.· | |||
| 0003e860:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| 0003e870:·7469·6f6e·0a20·202d·2072·6562·6f6f·745f··tion.··-·reboot_ | |||
| 0003e880:·7265·7175·6972·6564·0a20·202d·2072·6573··required.··-·res | |||
| Max diff block lines reached; 1913640/1948884 bytes (98.19%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | ····*·cpe:/o:fedoraproject:fedora:41 | 49 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 50 | ····*·cpe:/o:fedoraproject:fedora:42 | 50 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 51 | ····*·cpe:/o:fedoraproject:fedora:43 | 51 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 52 | ····*·cpe:/o:fedoraproject:fedora:44 | 52 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 53 | ····*·cpe:/o:fedoraproject:fedora:45 | 53 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 286, 14 lines modified | Offset 286, 18 lines modified | ||
| 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 294 | [customizations] | ||
| 295 | fips·=·true | ||
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 294 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 295 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 296 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 297 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 298 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 301 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 299 | ··set_fact: | 302 | ··set_fact: |
| Offset 389, 18 lines modified | Offset 393, 14 lines modified | ||
| 389 | ··-·NIST-800-53-SC-13 | 393 | ··-·NIST-800-53-SC-13 |
| 390 | ··-·enable_fips_mode | 394 | ··-·enable_fips_mode |
| 391 | ··-·high_severity | 395 | ··-·high_severity |
| 392 | ··-·medium_complexity | 396 | ··-·medium_complexity |
| 393 | ··-·medium_disruption | 397 | ··-·medium_disruption |
| 394 | ··-·reboot_required | 398 | ··-·reboot_required |
| 395 | ··-·restrict_strategy | 399 | ··-·restrict_strategy |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 397 | [customizations] | ||
| 398 | fips·=·true | ||
| 399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 400 | #·Remediation·is·applicable·only·in·certain·platforms | 401 | #·Remediation·is·applicable·only·in·certain·platforms |
| 401 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 402 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 402 | var_system_crypto_policy='FIPS' | 403 | var_system_crypto_policy='FIPS' |
| Offset 524, 14 lines modified | Offset 524, 33 lines modified | ||
| 524 | ··-·PCI-DSSv4-2.2.7 | 524 | ··-·PCI-DSSv4-2.2.7 |
| 525 | ··-·configure_crypto_policy | 525 | ··-·configure_crypto_policy |
| 526 | ··-·high_severity | 526 | ··-·high_severity |
| 527 | ··-·low_complexity | 527 | ··-·low_complexity |
| 528 | ··-·low_disruption | 528 | ··-·low_disruption |
| 529 | ··-·no_reboot_needed | 529 | ··-·no_reboot_needed |
| 530 | ··-·restrict_strategy | 530 | ··-·restrict_strategy |
| 531 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 532 | var_system_crypto_policy='FIPS' | ||
| 533 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 534 | rc=$? | ||
| 535 | if·test·"$rc"·=·127;·then | ||
| 536 | » echo·"$stderr_of_call"·>&2 | ||
| 537 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 538 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 539 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 540 | » false··#·end·with·an·error·code | ||
| 541 | elif·test·"$rc"·!=·0;·then | ||
| 542 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 543 | » false··#·end·with·an·error·code | ||
| 544 | fi | ||
| 531 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 545 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 532 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 546 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 533 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 547 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 534 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 548 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 535 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 549 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 536 | --- | 550 | --- |
| 537 | apiVersion:·machineconfiguration.openshift.io/v1 | 551 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 549, 33 lines modified | Offset 568, 14 lines modified | ||
| 549 | ············Before=kubelet.service | 568 | ············Before=kubelet.service |
| 550 | ············[Service] | 569 | ············[Service] |
| 551 | ············Type=oneshot | 570 | ············Type=oneshot |
| 552 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 571 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 553 | ············RemainAfterExit=yes | 572 | ············RemainAfterExit=yes |
| 554 | ············[Install] | 573 | ············[Install] |
| 555 | ············WantedBy=multi-user.target | 574 | ············WantedBy=multi-user.target |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | var_system_crypto_policy='FIPS' | ||
| 558 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 559 | rc=$? | ||
| 560 | if·test·"$rc"·=·127;·then | ||
| 561 | » echo·"$stderr_of_call"·>&2 | ||
| 562 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 563 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 564 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 565 | » false··#·end·with·an·error·code | ||
| 566 | elif·test·"$rc"·!=·0;·then | ||
| 567 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 568 | » false··#·end·with·an·error·code | ||
| 569 | fi | ||
| 570 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 575 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 571 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. | 576 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. |
| 572 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. | 577 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 573 | Severity: ··high | 578 | Severity: ··high |
| 574 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 579 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 575 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 580 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 576 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 581 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| Offset 2471, 14 lines modified | Offset 2471, 33 lines modified | ||
| 2471 | The·rng-tools·package·can·be·installed·with·the·following·command: | 2471 | The·rng-tools·package·can·be·installed·with·the·following·command: |
| 2472 | $·sudo·dnf·install·rng-tools | 2472 | $·sudo·dnf·install·rng-tools |
| 2473 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. | 2473 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. |
| 2474 | Severity: ··low | 2474 | Severity: ··low |
| 2475 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed | 2475 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed |
| Max diff block lines reached; 184680/190950 bytes (96.72%) of diff not shown. | |||
| Offset 14349, 15 lines modified | Offset 14349, 15 lines modified | ||
| 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038130:·6173·206f·6620·3230·323 | 00038130:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16441, 234 lines modified | Offset 16441, 234 lines modified | ||
| 00040380:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00040380:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00040390:·3230·3832·2220·7461·6269·6e64·6578·3d22··2082"·tabindex=" | 00040390:·3230·3832·2220·7461·6269·6e64·6578·3d22··2082"·tabindex=" | ||
| 000403a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000403a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000403b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000403b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 000403c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 000403c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 000403d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 000403d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 000403e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 000403e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 000403f0:·6469·6174·696f·6e20·4 | 000403f0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00040400:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040410:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040420:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040430:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 00040440:·3038·3222·3e3c·7461·626c·6520·636c·6173··082"><table·clas | |||
| 00040450:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00040460:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00040470:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00040480:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000404 | 00040400:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 00040410:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040420:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040430:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040440:·2220·6964·3d22·6964·6d32·3038·3222·3e3c··"·id="idm2082">< | |||
| 00040450:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00040460:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00040470:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 00040480:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 00040490:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 000404a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 000404b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 000404c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 000404d0:·7267·6574·3d22·2369·646d·3230·3833·2220··rget="#idm2083"· | |||
| 000404e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 000404f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00040500:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040510:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040520:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040530:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040540:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 00040550:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00040560:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00040570:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00040580:·6522·2069·643d·2269·646d·3230·3833·223e··e"·id="idm2083"> | |||
| 00040590:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000405a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000405b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000405c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000405d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000405e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000405f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040600:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00040 | 00040610:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00040 | 00040620:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 00040630:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00040640:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00040650:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00040660:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00040670:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00040680:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 00040690:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 000406a0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000406b0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000406c0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 000406d0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 000406e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 000406f0:·646d·3230·3834·2220·7461·6269·6e64·6578··dm2084"·tabindex | |||
| 00040700:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00040710:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00040720:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00040730:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00040740:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00040750:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 00040760:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040770:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040780:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040790:·2069·643d·2269·646d·3230·3834·223e·3c74···id="idm2084"><t | |||
| 000407a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 000407b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 000407c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 000407d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000407e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00040 | 000407f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 00040 | 00040800:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00040810:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000404e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000404f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00040500:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00040510:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00040520:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00040530:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00040540:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 00040550:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 00040560:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 00040570:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 00040580:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 00040590:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 000405a0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000405b0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000405c0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000405d0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000405e0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 000405f0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 00040600:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 00040610:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 00040620:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 00040630:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 00040640:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 00040650:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 00040660:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00040670:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00040680:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 00040690:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| Max diff block lines reached; 2001032/2012402 bytes (99.44%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ····*·cpe:/o:fedoraproject:fedora:41 | 42 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 43 | ····*·cpe:/o:fedoraproject:fedora:42 | 43 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:43 | 44 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:44 | 45 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:45 | 46 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 412, 14 lines modified | Offset 412, 33 lines modified | ||
| 412 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 412 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 413 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 413 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 414 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 414 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 416 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 416 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 417 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 417 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 418 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 418 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 420 | [[packages]] | ||
| 421 | name·=·"aide" | ||
| 422 | version·=·"*" | ||
| 423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 424 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 425 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 426 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 427 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 428 | package·--add=aide | ||
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 430 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 431 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 432 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 433 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 434 | package·install·aide | ||
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 435 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 436 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 437 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 438 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 439 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 424 | -·name:·Ensure·aide·is·installed | 440 | -·name:·Ensure·aide·is·installed |
| 425 | ··package: | 441 | ··package: |
| Offset 433, 26 lines modified | Offset 452, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 452 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·enable_strategy | 453 | ··-·enable_strategy |
| 435 | ··-·low_complexity | 454 | ··-·low_complexity |
| 436 | ··-·low_disruption | 455 | ··-·low_disruption |
| 437 | ··-·medium_severity | 456 | ··-·medium_severity |
| 438 | ··-·no_reboot_needed | 457 | ··-·no_reboot_needed |
| 439 | ··-·package_aide_installed | 458 | ··-·package_aide_installed |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | package·install·aide | ||
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 447 | [[packages]] | ||
| 448 | name·=·"aide" | ||
| 449 | version·=·"*" | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 455 | #·Remediation·is·applicable·only·in·certain·platforms | 464 | #·Remediation·is·applicable·only·in·certain·platforms |
| 456 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 465 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 472, 21 lines modified | Offset 479, 14 lines modified | ||
| 472 | include·install_aide | 479 | include·install_aide |
| 473 | class·install_aide·{ | 480 | class·install_aide·{ |
| 474 | ··package·{·'aide': | 481 | ··package·{·'aide': |
| 475 | ····ensure·=>·'installed', | 482 | ····ensure·=>·'installed', |
| 476 | ··} | 483 | ··} |
| 477 | } | 484 | } |
| 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 483 | package·--add=aide | ||
| 484 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 485 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 485 | Run·the·following·command·to·generate·a·new·database: | 486 | Run·the·following·command·to·generate·a·new·database: |
| 486 | $·sudo·/usr/sbin/aide·--init | 487 | $·sudo·/usr/sbin/aide·--init |
| 487 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 488 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 488 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 489 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 489 | To·initiate·a·manual·check,·run·the·following·command: | 490 | To·initiate·a·manual·check,·run·the·following·command: |
| 490 | $·sudo·/usr/sbin/aide·--check | 491 | $·sudo·/usr/sbin/aide·--check |
| Offset 848, 14 lines modified | Offset 848, 33 lines modified | ||
| 848 | ··-·PCI-DSSv4-2.2.7 | 848 | ··-·PCI-DSSv4-2.2.7 |
| 849 | ··-·configure_crypto_policy | 849 | ··-·configure_crypto_policy |
| 850 | ··-·high_severity | 850 | ··-·high_severity |
| 851 | ··-·low_complexity | 851 | ··-·low_complexity |
| 852 | ··-·low_disruption | 852 | ··-·low_disruption |
| 853 | ··-·no_reboot_needed | 853 | ··-·no_reboot_needed |
| 854 | ··-·restrict_strategy | 854 | ··-·restrict_strategy |
| 855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 856 | var_system_crypto_policy='DEFAULT' | ||
| 857 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 858 | rc=$? | ||
| 859 | if·test·"$rc"·=·127;·then | ||
| 860 | » echo·"$stderr_of_call"·>&2 | ||
| 861 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 862 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 863 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 864 | » false··#·end·with·an·error·code | ||
| 865 | elif·test·"$rc"·!=·0;·then | ||
| 866 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 867 | » false··#·end·with·an·error·code | ||
| 868 | fi | ||
| 855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 869 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 856 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 870 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 121877/127515 bytes (95.58%) of diff not shown. | |||
| Offset 14354, 16 lines modified | Offset 14354, 16 lines modified | ||
| 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038180:·2028·6173·206f·6620·3230·323 | 00038180:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00038190:·3 | 00038190:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17426, 129 lines modified | Offset 17426, 129 lines modified | ||
| 00044110:·6765·743d·2223·6964·6d32·3533·3422·2074··get="#idm2534"·t | 00044110:·6765·743d·2223·6964·6d32·3533·3422·2074··get="#idm2534"·t | ||
| 00044120:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00044120:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00044130:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00044130:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00044140:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00044140:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00044150:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00044150:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00044160:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00044160:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 00044170:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00044170:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 00044180:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 00044190:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000441a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000441b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000441 | 00044180:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 00044190:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000441a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000441b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 000441c0:·3d22·6964·6d32·3533·3422·3e3c·7072·653e··="idm2534"><pre> | |||
| 000441d0:·3c63·6f64·653e·0a76·6172·5f73·7973·7465··<code>.var_syste | |||
| 000441e0:·6d5f·6372·7970·746f·5f70·6f6c·6963·793d··m_crypto_policy= | |||
| 000441f0:·273c·6162·6272·2074·6974·6c65·3d22·6672··'<abbr·title="fr | |||
| 00044200:·6f6d·2042·656e·6368·6d61·726b·2f56·616c··om·Benchmark/Val | |||
| 00044210:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 00044220:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 00044230:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 00044240:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 00044250:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 00044260:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 00044270:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 00044280:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 00044290:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 000442a0:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 000442b0:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 000442c0:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 000442d0:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 000442e0:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 000442f0:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 00044300:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 00044310:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 00044320:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 00044330:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 00044340:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 00044350:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 00044360:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 00044370:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 00044380:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 00044390:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 000443a0:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 000443b0:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 000443c0:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 000443d0:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 000443e0:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 000443f0:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 00044400:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 00044410:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| 00044420:·3b20·7468·656e·0a09·6563·686f·2022·4572··;·then..echo·"Er | |||
| 00044430:·726f·7220·696e·766f·6b69·6e67·2074·6865··ror·invoking·the | |||
| 00044440:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 00044450:·6f6c·6963·6965·7320·7363·7269·7074·3a20··olicies·script:· | |||
| 00044460:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 00044470:·2026·6774·3b26·616d·703b·320a·0966·616c···>&2..fal | |||
| 00044480:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 00044490:·6e20·6572·726f·7220·636f·6465·0a66·690a··n·error·code.fi. | |||
| 000444a0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00044 | 000444b0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 000441e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000441f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00044200:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00044210:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00044220:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00044230:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00044 | 000444c0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 000444d0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 000444e0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 000444f0:·3d22·2369·646d·3235·3336·2220·7461·6269··="#idm2536"·tabi | |||
| 00044500:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00044510:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00044520:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00044530:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00044540:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00044550:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 00044560:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00044570:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00044580:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00044590:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000445a0:·2069·643d·2269·646d·3235·3336·223e·3c74···id="idm2536"><t | |||
| 000445b0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 000445c0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 000445d0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 000445e0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000445f0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00044 | 00044600:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 00044260:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00044270:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 00044 | 00044610:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00044290:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 000442a0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 000442b0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 000442c0:·7072·653e·3c63·6f64·653e·2d2d·2d0a·6170··pre><code>---.ap | |||
| 000442d0:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 000442e0:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 00044 | 00044620:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 00044630:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00044640:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00044650:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 00044660:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00044670:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00044680:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 00044690:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 000446a0:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 00044 | 000446b0:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | ||
| 00044310:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| Max diff block lines reached; 1415066/1432784 bytes (98.76%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 609, 14 lines modified | Offset 609, 33 lines modified | ||
| 609 | ··-·PCI-DSSv4-2.2.7 | 609 | ··-·PCI-DSSv4-2.2.7 |
| 610 | ··-·configure_crypto_policy | 610 | ··-·configure_crypto_policy |
| 611 | ··-·high_severity | 611 | ··-·high_severity |
| 612 | ··-·low_complexity | 612 | ··-·low_complexity |
| 613 | ··-·low_disruption | 613 | ··-·low_disruption |
| 614 | ··-·no_reboot_needed | 614 | ··-·no_reboot_needed |
| 615 | ··-·restrict_strategy | 615 | ··-·restrict_strategy |
| 616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 617 | var_system_crypto_policy='DEFAULT' | ||
| 618 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 619 | rc=$? | ||
| 620 | if·test·"$rc"·=·127;·then | ||
| 621 | » echo·"$stderr_of_call"·>&2 | ||
| 622 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 623 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 624 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 625 | » false··#·end·with·an·error·code | ||
| 626 | elif·test·"$rc"·!=·0;·then | ||
| 627 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 628 | » false··#·end·with·an·error·code | ||
| 629 | fi | ||
| 616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 617 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 618 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 619 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 620 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 621 | --- | 635 | --- |
| 622 | apiVersion:·machineconfiguration.openshift.io/v1 | 636 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 634, 33 lines modified | Offset 653, 14 lines modified | ||
| 634 | ············Before=kubelet.service | 653 | ············Before=kubelet.service |
| 635 | ············[Service] | 654 | ············[Service] |
| 636 | ············Type=oneshot | 655 | ············Type=oneshot |
| 637 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 656 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 638 | ············RemainAfterExit=yes | 657 | ············RemainAfterExit=yes |
| 639 | ············[Install] | 658 | ············[Install] |
| 640 | ············WantedBy=multi-user.target | 659 | ············WantedBy=multi-user.target |
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 642 | var_system_crypto_policy='DEFAULT' | ||
| 643 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 644 | rc=$? | ||
| 645 | if·test·"$rc"·=·127;·then | ||
| 646 | » echo·"$stderr_of_call"·>&2 | ||
| 647 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 648 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 649 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 650 | » false··#·end·with·an·error·code | ||
| 651 | elif·test·"$rc"·!=·0;·then | ||
| 652 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 653 | » false··#·end·with·an·error·code | ||
| 654 | fi | ||
| 655 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 660 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 656 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. | 661 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. |
| 657 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. | 662 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 658 | Severity: ··high | 663 | Severity: ··high |
| 659 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 664 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 660 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 665 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 661 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 666 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| Offset 2308, 38 lines modified | Offset 2308, 14 lines modified | ||
| 2308 | ··-·PCI-DSSv4-8.3.1 | 2308 | ··-·PCI-DSSv4-8.3.1 |
| 2309 | ··-·configure_strategy | 2309 | ··-·configure_strategy |
| 2310 | ··-·high_severity | 2310 | ··-·high_severity |
| 2311 | ··-·low_complexity | 2311 | ··-·low_complexity |
| 2312 | ··-·medium_disruption | 2312 | ··-·medium_disruption |
| 2313 | ··-·no_empty_passwords | 2313 | ··-·no_empty_passwords |
| 2314 | ··-·no_reboot_needed | 2314 | ··-·no_reboot_needed |
| 2315 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2316 | --- | ||
| 2317 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2318 | kind:·MachineConfig | ||
| 2319 | spec: | ||
| 2320 | ··config: | ||
| 2321 | ····ignition: | ||
| 2322 | ······version:·3.1.0 | ||
| 2323 | ····storage: | ||
| 2324 | ······files: | ||
| 2325 | ······-·contents: | ||
| 2326 | ··········source: | ||
| 2327 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2328 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2329 | ········mode:·0644 | ||
| 2330 | ········path:·/etc/pam.d/password-auth | ||
| 2331 | ········overwrite:·true | ||
| 2332 | ······-·contents: | ||
| 2333 | ··········source: | ||
| 2334 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2335 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2336 | ········mode:·0644 | ||
| 2337 | ········path:·/etc/pam.d/system-auth | ||
| 2338 | ········overwrite:·true | ||
| 2339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2315 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2340 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2316 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2341 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2317 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2342 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2318 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2343 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 2319 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 2344 | #·Remediation·is·applicable·only·in·certain·platforms | 2320 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2345 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2321 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2374, 14 lines modified | Offset 2350, 38 lines modified | ||
| 2374 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 2350 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 2375 | fi | 2351 | fi |
| 2376 | fi | 2352 | fi |
| Max diff block lines reached; 79830/93294 bytes (85.57%) of diff not shown. | |||
| Offset 14332, 16 lines modified | Offset 14332, 16 lines modified | ||
| 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038020:·2020·2020·2028·6173·206f·6620·3230·323 | 00038020:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038030:·2d31·3 | 00038030:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" | 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" |
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 | 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 |
| 54 | ··············Catalina | 54 | ··············Catalina |
| 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 57 | ····*·cpe:/o:apple:macos:10.15 | 57 | ····*·cpe:/o:apple:macos:10.15 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t |
| 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d | 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d |
| 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains | 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains |
| 66 | 2·groups·and·2·rules | 66 | 2·groups·and·2·rules |
| 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules | 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039100:·3 | 00039100:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039100:·3 | 00039100:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039100:·3 | 00039100:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 15 lines modified | Offset 14601, 15 lines modified | ||
| 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000390f0:·6f66·2032·3032·3 | 000390f0:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039180:·3032·3 | 00039180:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039170:·6620·3230·323 | 00039170:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14603, 15 lines modified | Offset 14603, 15 lines modified | ||
| 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00039110:·3230·323 | 00039110:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens | 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens |
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039460:·2032·3032·3 | 00039460:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14655, 16 lines modified | Offset 14655, 16 lines modified | ||
| 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039450:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039450:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00039460:·313 | 00039460:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039460:·206f·6620·3230·323 | 00039460:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00039460:·323 | 00039460:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi | 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00039470:·7320·6f66·2032·3032·3 | 00039470:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039470:·3032·3 | 00039470:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 16 lines modified | Offset 14657, 16 lines modified | ||
| 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039470:·2028·6173·206f·6620·3230·323 | 00039470:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039480:·3 | 00039480:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039470:·6620·3230·323 | 00039470:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2028·6173·206f·6620·3230·323 | 00039200:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039210:·3 | 00039210:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039200:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00039210:·313 | 00039210:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039020:·6620·3230·323 | 00039020:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039020:·3 | 00039020:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039040:·2032·3032·3 | 00039040:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14589, 16 lines modified | Offset 14589, 16 lines modified | ||
| 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039030:·2020·2020·2028·6173·206f·6620·3230·323 | 00039030:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00039040:·2d31·3 | 00039040:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift | 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039040:·206f·6620·3230·323 | 00039040:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039040:·3032·3 | 00039040:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e50:·3 | 00037e50:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15053, 203 lines modified | Offset 15053, 203 lines modified | ||
| 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ad40:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ad50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad80:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ad40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad80:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 0003ad90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ada0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003adb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003adc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003add0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ade0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003adf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ae10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ae20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ae30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ae40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ae50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ae70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ae80:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003ae90:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003aea0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003aeb0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003aec0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003aed0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003aee0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003aef0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003af00:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003af10:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003af20:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003af30:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003af40:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003af50:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 0003af60:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 0003af70:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003afa0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003afb0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003afc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003afd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003afe0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003aff0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b000:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b010:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b020:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b070:·7461·7267·6574·3d22·2369·646d·3536·3432··target="#idm5642 | |||
| 0003b080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b0e0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b0f0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b100:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b110:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b120:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b130:·3d22·6964·6d35·3634·3222·3e3c·7072·653e··="idm5642"><pre> | |||
| 0003b140:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b150:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b160:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b170:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b180:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b190:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b1a0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b1b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b1c0:·3d22·2369·646d·3536·3433·2220·7461·6269··="#idm5643"·tabi | |||
| 0003b1d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b1e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b1f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b200:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b210:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b220:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003b230:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b240:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b250:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b260:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b270:·646d·3536·3433·223e·3c74·6162·6c65·2063··dm5643"><table·c | |||
| 0003b280:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b290:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b2d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b2f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b300:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b310:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b320:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b330:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b340:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| Max diff block lines reached; 1639738/1667668 bytes (98.33%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 14 lines modified | Offset 115, 26 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 128 | ··package: | 138 | ··package: |
| Offset 137, 19 lines modified | Offset 149, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 151 | ··-·low_complexity |
| 140 | ··-·low_disruption | 152 | ··-·low_disruption |
| 141 | ··-·medium_severity | 153 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 176, 14 lines modified | ||
| 169 | include·install_aide | 176 | include·install_aide |
| 170 | class·install_aide·{ | 177 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 178 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 179 | ····ensure·=>·'installed', |
| 173 | ··} | 180 | ··} |
| 174 | } | 181 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=aide | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 352, 14 lines modified | Offset 352, 17 lines modified | ||
| 352 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 352 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 353 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 353 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 354 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 354 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 355 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 355 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- | 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- |
| 357 | ···························00223 | 357 | ···························00223 |
| 358 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 | 358 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 360 | package·--add=dracut-fips-aesni | ||
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 364 | -·name:·Check·if·system·supports·AES-NI | 366 | -·name:·Check·if·system·supports·AES-NI |
| 365 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo | 367 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo |
| Offset 422, 17 lines modified | Offset 425, 14 lines modified | ||
| 422 | ········yum·install·-y·"dracut-fips-aesni" | 425 | ········yum·install·-y·"dracut-fips-aesni" |
| 423 | ····fi | 426 | ····fi |
| 424 | fi | 427 | fi |
| 425 | else | 428 | else |
| 426 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 429 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 427 | fi | 430 | fi |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 429 | package·--add=dracut-fips-aesni | ||
| 430 | Group ·Disk·Partitioning· Group·contains·10·rules | 431 | Group ·Disk·Partitioning· Group·contains·10·rules |
| 431 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which | 432 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which |
| 432 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default | 433 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default |
| 433 | partitioning·scheme·creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 434 | partitioning·scheme·creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 434 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify | 435 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify |
| 435 | ······partitioning.\"·This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the | 436 | ······partitioning.\"·This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the |
| 436 | ······volume·group·already·created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create | 437 | ······volume·group·already·created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create |
| Offset 652, 14 lines modified | Offset 652, 21 lines modified | ||
| 652 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 652 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 653 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 653 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 654 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 654 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 655 | ············/tmp·directory·is·wiped·during·reboot. | 655 | ············/tmp·directory·is·wiped·during·reboot. |
| 656 | Severity: ··low | 656 | Severity: ··low |
| 657 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 657 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| Max diff block lines reached; 86317/92662 bytes (93.15%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e50:·3 | 00037e50:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15060, 202 lines modified | Offset 15060, 202 lines modified | ||
| 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | ||
| 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ada0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003adb0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003adc0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003add0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ade0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003adf0:·646d·3536·3431·223e·3c70·7265·3e3c·636f··dm5641"><pre><co | |||
| 0003ae00:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae10:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae20:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ada0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003adb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003add0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ade0:·2069·643d·2269·646d·3536·3431·223e·3c74···id="idm5641"><t | |||
| 0003adf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ae00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ae70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ae80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ae90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003aea0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aeb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aec0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003aed0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aee0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003aef0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003af00:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003af10:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003af20:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003af30:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003af40:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003af50:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003af60:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003af70:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003af80:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003af90:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003afa0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003afb0:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003afc0:·302d·3032·3030·3239·0a20·202d·204e·4953··0-020029.··-·NIS | |||
| 0003afd0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003afe0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003aff0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b000:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b010:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b020:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b030:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b040:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b050:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b060:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b070:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b080:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b090:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b0a0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b0b0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b0c0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b0d0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b0e0:·3634·3222·2074·6162·696e·6465·783d·2230··642"·tabindex="0 | |||
| 0003b0f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b100:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b110:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b120:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b130:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b140:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b150:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b160:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b170:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b180:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b190:·2069·643d·2269·646d·3536·3432·223e·3c70···id="idm5642"><p | |||
| 0003b1a0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b1b0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b1c0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b1d0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b1e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b1f0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b200:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b210:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b220:·6765·743d·2223·6964·6d35·3634·3322·2074··get="#idm5643"·t | |||
| 0003b230:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b240:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b250:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b260:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b270:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b280:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b290:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b2a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b2b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b2c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b2d0:·3d22·6964·6d35·3634·3322·3e3c·7461·626c··="idm5643"><tabl | |||
| 0003b2e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b2f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b300:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b310:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b320:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b330:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b340:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b350:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b360:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b370:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| Max diff block lines reached; 1719178/1746970 bytes (98.41%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 116, 14 lines modified | Offset 116, 26 lines modified | ||
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 139 | ··package: |
| Offset 138, 19 lines modified | Offset 150, 14 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 152 | ··-·low_complexity |
| 141 | ··-·low_disruption | 153 | ··-·low_disruption |
| 142 | ··-·medium_severity | 154 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 170, 21 lines modified | Offset 177, 14 lines modified | ||
| 170 | include·install_aide | 177 | include·install_aide |
| 171 | class·install_aide·{ | 178 | class·install_aide·{ |
| 172 | ··package·{·'aide': | 179 | ··package·{·'aide': |
| 173 | ····ensure·=>·'installed', | 180 | ····ensure·=>·'installed', |
| 174 | ··} | 181 | ··} |
| 175 | } | 182 | } |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 184 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/sbin/aide·--init | 185 | $·sudo·/usr/sbin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 187 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 188 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 189 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 884, 14 lines modified | Offset 884, 17 lines modified | ||
| 884 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 884 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 885 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 885 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 886 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 886 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 888 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- | 888 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- |
| 889 | ···························00223 | 889 | ···························00223 |
| 890 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 | 890 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 |
| 891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 892 | package·--add=dracut-fips-aesni | ||
| 891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 892 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 893 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 894 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 895 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 896 | -·name:·Check·if·system·supports·AES-NI | 898 | -·name:·Check·if·system·supports·AES-NI |
| 897 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo | 899 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo |
| Offset 954, 17 lines modified | Offset 957, 14 lines modified | ||
| 954 | ········yum·install·-y·"dracut-fips-aesni" | 957 | ········yum·install·-y·"dracut-fips-aesni" |
| 955 | ····fi | 958 | ····fi |
| 956 | fi | 959 | fi |
| 957 | else | 960 | else |
| 958 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 961 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 959 | fi | 962 | fi |
| 960 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 961 | package·--add=dracut-fips-aesni | ||
| 962 | Group ·Disk·Partitioning· Group·contains·10·rules | 963 | Group ·Disk·Partitioning· Group·contains·10·rules |
| 963 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which | 964 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which |
| 964 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default | 965 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default |
| 965 | partitioning·scheme·creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 966 | partitioning·scheme·creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 966 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify | 967 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify |
| 967 | ······partitioning.\"·This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the | 968 | ······partitioning.\"·This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the |
| 968 | ······volume·group·already·created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create | 969 | ······volume·group·already·created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create |
| Offset 1184, 14 lines modified | Offset 1184, 21 lines modified | ||
| 1184 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 1184 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 1185 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 1185 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 1186 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 1186 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 1187 | ············/tmp·directory·is·wiped·during·reboot. | 1187 | ············/tmp·directory·is·wiped·during·reboot. |
| 1188 | Severity: ··low | 1188 | Severity: ··low |
| 1189 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 1189 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| Max diff block lines reached; 91959/98318 bytes (93.53%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e60:·3 | 00037e60:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15044, 203 lines modified | Offset 15044, 203 lines modified | ||
| 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | ||
| 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003acb0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003acc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003acd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ace0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003acf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003acb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003acc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003acd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ace0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003acf0:·643d·2269·646d·3536·3431·223e·3c74·6162··d="idm5641"><tab | |||
| 0003ad00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ad70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ad80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ad90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ada0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003adb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003adc0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003add0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ade0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003adf0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003ae00:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003ae10:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003ae20:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003ae30:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003ae40:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003ae50:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003ae60:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003ae70:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003ae80:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003ae90:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003aea0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003aeb0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003aec0:·5341·2d53·5449·472d·4f4c·3037·2d30·302d··SA-STIG-OL07-00- | |||
| 0003aed0:·3032·3030·3239·0a20·202d·204e·4953·542d··020029.··-·NIST- | |||
| 0003aee0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003af00:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003af10:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003af20:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003af30:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003af40:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003af50:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003af60:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003af70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003af80:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003af90:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003afa0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003afb0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003afc0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003afd0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003afe0:·2d74·6172·6765·743d·2223·6964·6d35·3634··-target="#idm564 | |||
| 0003aff0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b000:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b010:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b020:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b030:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b040:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b050:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b060:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b070:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b080:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b090:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b0a0:·643d·2269·646d·3536·3432·223e·3c70·7265··d="idm5642"><pre | |||
| 0003b0b0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b0c0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b0d0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b0e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b0f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b100:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b110:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b120:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b130:·743d·2223·6964·6d35·3634·3322·2074·6162··t="#idm5643"·tab | |||
| 0003b140:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b150:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b160:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b170:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b180:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b190:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b1a0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b1b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b1c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b1d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b1e0:·6964·6d35·3634·3322·3e3c·7461·626c·6520··idm5643"><table· | |||
| 0003b1f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b200:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b210:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b220:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b230:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b240:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b250:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b260:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b270:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b280:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b290:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b2a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b2b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| Max diff block lines reached; 1471411/1499341 bytes (98.14%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 26 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 135 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 136 | ··package: |
| Offset 135, 19 lines modified | Offset 147, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 149 | ··-·low_complexity |
| 138 | ··-·low_disruption | 150 | ··-·low_disruption |
| 139 | ··-·medium_severity | 151 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 174, 14 lines modified | ||
| 167 | include·install_aide | 174 | include·install_aide |
| 168 | class·install_aide·{ | 175 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 171 | ··} | 178 | ··} |
| 172 | } | 179 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 493, 14 lines modified | Offset 493, 21 lines modified | ||
| 493 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 493 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 494 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 494 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 495 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 495 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 496 | ············/tmp·directory·is·wiped·during·reboot. | 496 | ············/tmp·directory·is·wiped·during·reboot. |
| 497 | Severity: ··low | 497 | Severity: ··low |
| 498 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 498 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 499 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 499 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 505 | services·--enabled=tmp.mount | ||
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 507 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 508 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 509 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 510 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 505 | -·name:·Enable·mount·tmp | 511 | -·name:·Enable·mount·tmp |
| 506 | ··ansible.builtin.systemd: | 512 | ··ansible.builtin.systemd: |
| Offset 528, 21 lines modified | Offset 535, 14 lines modified | ||
| 528 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 535 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 529 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 536 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 530 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 537 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 531 | else | 538 | else |
| 532 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 539 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 533 | fi | 540 | fi |
| 534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 535 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 536 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 537 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 538 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 539 | services·--enabled=tmp.mount | ||
| 540 | Group ·Sudo· Group·contains·16·rules | 541 | Group ·Sudo· Group·contains·16·rules |
| 541 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 542 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 542 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 543 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 543 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 544 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 544 | execute. | 545 | execute. |
| Max diff block lines reached; 71934/78083 bytes (92.13%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e40:·6f66·2032·3032·3 | 00037e40:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 47013, 175 lines modified | Offset 47013, 175 lines modified | ||
| 000b7a40:·6172·6765·743d·2223·6964·6d33·3735·3932··arget="#idm37592 | 000b7a40:·6172·6765·743d·2223·6964·6d33·3735·3932··arget="#idm37592 | ||
| 000b7a50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000b7a50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000b7a60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000b7a60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000b7a70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000b7a70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000b7a80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000b7a80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000b7a90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000b7a90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000b7aa0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000b7aa0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 000b7ab0:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 000b7ab0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000b7ac0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000b7ad0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000b7ae0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000b7af0:·7365·2220·6964·3d22·6964·6d33·3735·3932··se"·id="idm37592 | |||
| 000b7b00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 000b7b10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000b7b20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000b7b30:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 000b7b40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000b7b50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000b7b60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000b7b70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000b7b80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000b7b90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000b7ba0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 000b7bb0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 000b7bc0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 000b7bd0:·7468·3e3c·7464·3e64·6973·6162·6c65·3c2f··th><td>disable</ | |||
| 000b7be0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000b7bf0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 000b7c00:·653a·2045·6e73·7572·6520·6468·6370·2069··e:·Ensure·dhcp·i | |||
| 000b7c10:·7320·7265·6d6f·7665·640a·2020·7061·636b··s·removed.··pack | |||
| 000b7c20:·6167·653a·0a20·2020·206e·616d·653a·2064··age:.····name:·d | |||
| 000b7c30:·6863·700a·2020·2020·7374·6174·653a·2061··hcp.····state:·a | |||
| 000b7c40:·6273·656e·740a·2020·7461·6773·3a0a·2020··bsent.··tags:.·· | |||
| 000b7c50:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 000b7c60:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 000b7c70:·3030·2d35·332d·434d·2d37·2861·290a·2020··00-53-CM-7(a).·· | |||
| 000b7c80:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 000b7c90:·2d37·2862·290a·2020·2d20·5043·492d·4453··-7(b).··-·PCI-DS | |||
| 000b7ca0:·5376·342d·322e·322e·340a·2020·2d20·6469··Sv4-2.2.4.··-·di | |||
| 000b7cb0:·7361·626c·655f·7374·7261·7465·6779·0a20··sable_strategy.· | |||
| 000b7cc0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 000b7cd0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 000b7ce0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 000b7cf0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 000b7d00:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 000b7d10:·2d20·7061·636b·6167·655f·6468·6370·5f72··-·package_dhcp_r | |||
| 000b7d20:·656d·6f76·6564·0a3c·2f63·6f64·653e·3c2f··emoved.</code></ | |||
| 000b7d30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 000b7d40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 000b7d50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 000b7d60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 000b7d70:·2d74·6172·6765·743d·2223·6964·6d33·3735··-target="#idm375 | |||
| 000b7d80:·3933·2220·7461·6269·6e64·6578·3d22·3022··93"·tabindex="0" | |||
| 000b7d90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000b7da0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000b7db0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000b7dc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000b7dd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000b7de0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 000b7df0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 000b7e00:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000b7e10:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000b7e20:·6522·2069·643d·2269·646d·3337·3539·3322··e"·id="idm37593" | |||
| 000b7e30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000b7e40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000b7e50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000b7e60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000b7e70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000b7e80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000b7e90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000b7ea0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000b7eb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000b7ec0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000b7ed0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 000b7ee0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 000b7ef0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000b7f00:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | |||
| 000b7f10:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 000b7f20:·7072·653e·3c63·6f64·653e·0a23·2043·4155··pre><code>.#·CAU | |||
| 000b7f30:·5449·4f4e·3a20·5468·6973·2072·656d·6564··TION:·This·remed | |||
| 000b7f40:·6961·7469·6f6e·2073·6372·6970·7420·7769··iation·script·wi | |||
| 000b7f50:·6c6c·2072·656d·6f76·6520·6468·6370·0a23··ll·remove·dhcp.# | |||
| 000b7f60:·0920·2020·6672·6f6d·2074·6865·2073·7973··.···from·the·sys | |||
| 000b7f70:·7465·6d2c·2061·6e64·206d·6179·2072·656d··tem,·and·may·rem | |||
| 000b7f80:·6f76·6520·616e·7920·7061·636b·6167·6573··ove·any·packages | |||
| 000b7f90:·0a23·0920·2020·7468·6174·2064·6570·656e··.#.···that·depen | |||
| 000b7fa0:·6420·6f6e·2064·6863·702e·2045·7865·6375··d·on·dhcp.·Execu | |||
| 000b7fb0:·7465·2074·6869·730a·2309·2020·2072·656d··te·this.#.···rem | |||
| 000b7fc0:·6564·6961·7469·6f6e·2041·4654·4552·2074··ediation·AFTER·t | |||
| 000b7fd0:·6573·7469·6e67·206f·6e20·6120·6e6f·6e2d··esting·on·a·non- | |||
| 000b7fe0:·7072·6f64·7563·7469·6f6e·0a23·0920·2020··production.#.··· | |||
| 000b7ff0:·7379·7374·656d·210a·0a69·6620·7270·6d20··system!..if·rpm· | |||
| 000b8000:·2d71·202d·2d71·7569·6574·2022·6468·6370··-q·--quiet·"dhcp | |||
| 000b8010:·2220·3b20·7468·656e·0a0a·2020·2020·7975··"·;·then..····yu | |||
| 000b8020:·6d20·7265·6d6f·7665·202d·7920·2264·6863··m·remove·-y·"dhc | |||
| 000b8030:·7022·0a0a·6669·0a3c·2f63·6f64·653e·3c2f··p"..fi.</code></ | |||
| 000b8040:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 000b8050:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 000b8060:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 000b8070:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 000b8080:·2d74·6172·6765·743d·2223·6964·6d33·3735··-target="#idm375 | |||
| 000b8090:·3934·2220·7461·6269·6e64·6578·3d22·3022··94"·tabindex="0" | |||
| 000b80a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000b80b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000b80c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000b80d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000b80e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000b80f0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 000b | 000b7ac0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 000b | 000b7ad0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| Max diff block lines reached; 285996/309924 bytes (92.28%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 10111, 14 lines modified | Offset 10111, 21 lines modified | ||
| 10111 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 10111 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 10112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 10112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 10113 | ···························A.9.1.2 | 10113 | ···························A.9.1.2 |
| 10114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 10115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 10116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 10117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 10118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10123 | package·--remove=dhcp | ||
| 10118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10123 | -·name:·Ensure·dhcp·is·removed | 10129 | -·name:·Ensure·dhcp·is·removed |
| 10124 | ··package: | 10130 | ··package: |
| Offset 10160, 21 lines modified | Offset 10167, 14 lines modified | ||
| 10160 | include·remove_dhcp | 10167 | include·remove_dhcp |
| 10161 | class·remove_dhcp·{ | 10168 | class·remove_dhcp·{ |
| 10162 | ··package·{·'dhcp': | 10169 | ··package·{·'dhcp': |
| 10163 | ····ensure·=>·'purged', | 10170 | ····ensure·=>·'purged', |
| 10164 | ··} | 10171 | ··} |
| 10165 | } | 10172 | } |
| 10166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10171 | package·--remove=dhcp | ||
| 10172 | Group ·Mail·Server·Software· Group·contains·1·rule | 10173 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 10173 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 10174 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 10174 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 10175 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 10175 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 10176 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 10176 | possible. | 10177 | possible. |
| 10177 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. | 10178 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. |
| Offset 10212, 14 lines modified | Offset 10212, 21 lines modified | ||
| 10212 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 10212 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 10213 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 10213 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 10214 | ···························A.9.1.2 | 10214 | ···························A.9.1.2 |
| 10215 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10215 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10216 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 10216 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 10217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227,·SRG-OS-000095-GPOS-00049 | 10217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227,·SRG-OS-000095-GPOS-00049 |
| 10218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10224 | package·--remove=sendmail | ||
| 10219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10224 | -·name:·Ensure·sendmail·is·removed | 10230 | -·name:·Ensure·sendmail·is·removed |
| 10225 | ··package: | 10231 | ··package: |
| Offset 10268, 21 lines modified | Offset 10275, 14 lines modified | ||
| 10268 | include·remove_sendmail | 10275 | include·remove_sendmail |
| 10269 | class·remove_sendmail·{ | 10276 | class·remove_sendmail·{ |
| 10270 | ··package·{·'sendmail': | 10277 | ··package·{·'sendmail': |
| 10271 | ····ensure·=>·'purged', | 10278 | ····ensure·=>·'purged', |
| 10272 | ··} | 10279 | ··} |
| 10273 | } | 10280 | } |
| 10274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10279 | package·--remove=sendmail | ||
| 10280 | Group ·Obsolete·Services· Group·contains·6·groups·and·11·rules | 10281 | Group ·Obsolete·Services· Group·contains·6·groups·and·11·rules |
| 10281 | _\x8[_\x8r_\x8e_\x8f_\x8] ·This·section·discusses·a·number·of·network-visible·services·which·have·historically | 10282 | _\x8[_\x8r_\x8e_\x8f_\x8] ·This·section·discusses·a·number·of·network-visible·services·which·have·historically |
| 10282 | caused·problems·for·system·security,·and·for·which·disabling·or·severely·limiting·the·service | 10283 | caused·problems·for·system·security,·and·for·which·disabling·or·severely·limiting·the·service |
| 10283 | has·been·the·best·available·guidance·for·some·time.·As·a·result·of·this,·many·of·these | 10284 | has·been·the·best·available·guidance·for·some·time.·As·a·result·of·this,·many·of·these |
| 10284 | services·are·not·installed·as·part·of·Oracle·Linux·7·by·default. | 10285 | services·are·not·installed·as·part·of·Oracle·Linux·7·by·default. |
| 10285 | Organizations·which·are·running·these·services·should·switch·to·more·secure·equivalents·as | 10286 | Organizations·which·are·running·these·services·should·switch·to·more·secure·equivalents·as |
| Offset 10318, 14 lines modified | Offset 10318, 21 lines modified | ||
| 10318 | ···························4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 10318 | ···························4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 10319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 10319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 10320 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 10320 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 10321 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10321 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 10322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 10323 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10323 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 10324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 10325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10330 | package·--remove=xinetd | ||
| 10325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10330 | -·name:·Ensure·xinetd·is·removed | 10336 | -·name:·Ensure·xinetd·is·removed |
| 10331 | ··package: | 10337 | ··package: |
| Offset 10374, 21 lines modified | Offset 10381, 14 lines modified | ||
| 10374 | include·remove_xinetd | 10381 | include·remove_xinetd |
| Max diff block lines reached; 20100/26128 bytes (76.93%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16434, 203 lines modified | Offset 16434, 203 lines modified | ||
| 00040310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00040310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00040320:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | 00040320:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | ||
| 00040330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00040330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00040340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00040340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00040350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00040350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00040360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00040360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00040370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00040370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00040380:·6564·6961·7469·6f6e·204 | 00040380:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00040390:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 000403a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000403b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000403c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000403d0:·6522·2069·643d·2269·646d·3536·3431·223e··e"·id="idm5641"> | |||
| 00040390:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000403a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000403b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000403c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000403d0:·3536·3431·223e·3c74·6162·6c65·2063·6c61··5641"><table·cla | |||
| 000403e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000403f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040400:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040410:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040420:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040430:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040440:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040450:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040460:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040470:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040480:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040490:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 000404a0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 000404b0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000404c0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000404d0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 000404e0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 000404f0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00040500:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 00040510:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00040520:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00040530:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00040540:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00040550:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00040560:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00040570:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00040580:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 00040590:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 000405a0:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 000405b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000405c0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 000405d0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 000405e0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 000405f0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040600:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040610:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040620:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040630:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040640:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040650:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 00040660:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 00040670:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040680:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040690:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000406a0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000406b0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000406c0:·743d·2223·6964·6d35·3634·3222·2074·6162··t="#idm5642"·tab | |||
| 000406d0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 000406e0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 000406f0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040700:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040710:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040720:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 00040730:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 00040740:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00040750:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040760:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040770:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040780:·3536·3432·223e·3c70·7265·3e3c·636f·6465··5642"><pre><code | |||
| 00040790:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 000407a0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 000407b0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 000407c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 000407d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 000407e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 000407f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040800:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040810:·6d35·3634·3322·2074·6162·696e·6465·783d··m5643"·tabindex= | |||
| 00040820:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040830:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040840:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040850:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040860:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040870:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 00040880:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 00040890:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000408a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000408b0:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 000408c0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 000408d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000408e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000408f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040900:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040910:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040920:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040930:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040940:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040950:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040960:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040970:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040980:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040990:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 000409a0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| Max diff block lines reached; 189107/216899 bytes (87.19%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:7 | 44 | ····*·cpe:/o:oracle:linux:7 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 422, 14 lines modified | Offset 422, 26 lines modified | ||
| 422 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 422 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 423 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 423 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 424 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 424 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 425 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 425 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 426 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 426 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 427 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 427 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 428 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 428 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 430 | [[packages]] | ||
| 431 | name·=·"aide" | ||
| 432 | version·=·"*" | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 438 | package·--add=aide | ||
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 430 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 431 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 432 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 433 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 434 | -·name:·Ensure·aide·is·installed | 444 | -·name:·Ensure·aide·is·installed |
| 435 | ··package: | 445 | ··package: |
| Offset 444, 19 lines modified | Offset 456, 14 lines modified | ||
| 444 | ··-·PCI-DSSv4-11.5.2 | 456 | ··-·PCI-DSSv4-11.5.2 |
| 445 | ··-·enable_strategy | 457 | ··-·enable_strategy |
| 446 | ··-·low_complexity | 458 | ··-·low_complexity |
| 447 | ··-·low_disruption | 459 | ··-·low_disruption |
| 448 | ··-·medium_severity | 460 | ··-·medium_severity |
| 449 | ··-·no_reboot_needed | 461 | ··-·no_reboot_needed |
| 450 | ··-·package_aide_installed | 462 | ··-·package_aide_installed |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 452 | [[packages]] | ||
| 453 | name·=·"aide" | ||
| 454 | version·=·"*" | ||
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 460 | #·Remediation·is·applicable·only·in·certain·platforms | 468 | #·Remediation·is·applicable·only·in·certain·platforms |
| 461 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 469 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 476, 21 lines modified | Offset 483, 14 lines modified | ||
| 476 | include·install_aide | 483 | include·install_aide |
| 477 | class·install_aide·{ | 484 | class·install_aide·{ |
| 478 | ··package·{·'aide': | 485 | ··package·{·'aide': |
| 479 | ····ensure·=>·'installed', | 486 | ····ensure·=>·'installed', |
| 480 | ··} | 487 | ··} |
| 481 | } | 488 | } |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 487 | package·--add=aide | ||
| 488 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 489 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 489 | Run·the·following·command·to·generate·a·new·database: | 490 | Run·the·following·command·to·generate·a·new·database: |
| 490 | $·sudo·/usr/sbin/aide·--init | 491 | $·sudo·/usr/sbin/aide·--init |
| 491 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 492 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 492 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 493 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 493 | To·initiate·a·manual·check,·run·the·following·command: | 494 | To·initiate·a·manual·check,·run·the·following·command: |
| 494 | $·sudo·/usr/sbin/aide·--check | 495 | $·sudo·/usr/sbin/aide·--check |
| Offset 4807, 38 lines modified | Offset 4807, 14 lines modified | ||
| 4807 | ··-·PCI-DSSv4-8.3.1 | 4807 | ··-·PCI-DSSv4-8.3.1 |
| 4808 | ··-·configure_strategy | 4808 | ··-·configure_strategy |
| 4809 | ··-·high_severity | 4809 | ··-·high_severity |
| 4810 | ··-·low_complexity | 4810 | ··-·low_complexity |
| 4811 | ··-·medium_disruption | 4811 | ··-·medium_disruption |
| 4812 | ··-·no_empty_passwords | 4812 | ··-·no_empty_passwords |
| 4813 | ··-·no_reboot_needed | 4813 | ··-·no_reboot_needed |
| 4814 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4815 | --- | ||
| 4816 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 4817 | kind:·MachineConfig | ||
| 4818 | spec: | ||
| 4819 | ··config: | ||
| 4820 | ····ignition: | ||
| 4821 | ······version:·3.1.0 | ||
| 4822 | ····storage: | ||
| 4823 | ······files: | ||
| 4824 | ······-·contents: | ||
| 4825 | ··········source: | ||
| 4826 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 4827 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 4828 | ········mode:·0644 | ||
| 4829 | ········path:·/etc/pam.d/password-auth | ||
| 4830 | ········overwrite:·true | ||
| 4831 | ······-·contents: | ||
| 4832 | ··········source: | ||
| 4833 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 4834 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 4835 | ········mode:·0644 | ||
| 4836 | ········path:·/etc/pam.d/system-auth | ||
| 4837 | ········overwrite:·true | ||
| 4838 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 4814 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 4839 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4815 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4840 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 4816 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 4841 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4817 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4842 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 4818 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 4843 | #·Remediation·is·applicable·only·in·certain·platforms | 4819 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4844 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 4820 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 4873, 14 lines modified | Offset 4849, 38 lines modified | ||
| 4873 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 4849 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 4874 | fi | 4850 | fi |
| 4875 | fi | 4851 | fi |
| Max diff block lines reached; 17533/31089 bytes (56.40%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 232 lines modified | Offset 15073, 232 lines modified | ||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ae80:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ae90:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003aea0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003aeb0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003aec0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003aed0:·3137·3222·3e3c·7072·653e·3c63·6f64·653e··172"><pre><code> | |||
| 0003aee0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae80:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ae90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aea0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aeb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aec0:·3d22·6964·6d36·3137·3222·3e3c·7461·626c··="idm6172"><tabl | |||
| 0003aed0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aee0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aef0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003af00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003afa0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003afb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003afc0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003a | 0003aef0:·6d65·203d·2022·6472·6163·7574·2d66·6970··me·=·"dracut-fip | ||
| 0003af00:·7322·0a76·6572·7369·6f6e·203d·2022·2a22··s".version·=·"*" | |||
| 0003af10:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003af20:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003af30:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003af40:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003afe0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003aff0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b000:·6472·6163·7574·2d66·6970·730a·2020·2020··dracut-fips.···· | |||
| 0003b010:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b020:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | |||
| 0003b030:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b040:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b050:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b060:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b070:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b080:·225d·0a20·2020·2061·6e64·206e·6f74·2028··"].····and·not·( | |||
| 0003b090:·206c·6f6f·6b75·7028·2265·6e76·222c·2022···lookup("env",·" | |||
| 0003b0a0:·636f·6e74·6169·6e65·7222·2920·3d3d·2022··container")·==·" | |||
| 0003b0b0:·6277·7261·702d·6f73·6275·696c·6422·2029··bwrap-osbuild"·) | |||
| 0003b0c0:·2029·0a20·202d·2061·6e73·6962·6c65·5f76···).··-·ansible_v | |||
| 0003b0d0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b0e0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b0f0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b100:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b110:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b120:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b130:·3130·2e31·2e32·0a20·202d·204e·4953·542d··10.1.2.··-·NIST- | |||
| 0003b140:·3830·302d·3137·312d·332e·3133·2e31·310a··800-171-3.13.11. | |||
| 0003b150:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b160:·2d33·2e31·332e·380a·2020·2d20·4e49·5354··-3.13.8.··-·NIST | |||
| 0003b170:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b180:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b190:·4941·2d37·0a20·202d·204e·4953·542d·3830··IA-7.··-·NIST-80 | |||
| 0003b1a0:·302d·3533·2d53·432d·3132·0a20·202d·204e··0-53-SC-12.··-·N | |||
| 0003b1b0:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003b1c0:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 0003b1d0:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 0003b1e0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b1f0:·3133·0a20·202d·2065·6e61·626c·655f·7374··13.··-·enable_st | |||
| 0003b200:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b210:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b220:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b230:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b240:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b250:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b260:·655f·6472·6163·7574·2d66·6970·735f·696e··e_dracut-fips_in | |||
| 0003b270:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b280:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b290:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003 | 0003af50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003af60:·743d·2223·6964·6d36·3137·3322·2074·6162··t="#idm6173"·tab | |||
| 0003af70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003af80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003af90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003afa0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003afb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003afc0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003afd0:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 0003b2b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b2c0:·612d·7461·7267·6574·3d22·2369·646d·3631··a-target="#idm61 | |||
| 0003b2d0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | |||
| 0003b2e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b2f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b300:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b310:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b320:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b330:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b340:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003 | 0003afe0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003 | 0003aff0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b000:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b010:·6964·3d22·6964·6d36·3137·3322·3e3c·7461··id="idm6173"><ta | ||
| 0003b390:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b3a0:·6765·735d·5d0a·6e61·6d65·203d·2022·6472··ges]].name·=·"dr | |||
| Max diff block lines reached; 1096267/1128061 bytes (97.18%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:7 | 54 | ····*·cpe:/o:oracle:linux:7 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 99, 14 lines modified | Offset 99, 26 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dracut-fips" | ||
| 109 | version·=·"*" | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | package·--add=dracut-fips | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | -·name:·Ensure·dracut-fips·is·installed | 121 | -·name:·Ensure·dracut-fips·is·installed |
| 112 | ··package: | 122 | ··package: |
| Offset 128, 19 lines modified | Offset 140, 14 lines modified | ||
| 128 | ··-·NIST-800-53-SC-13 | 140 | ··-·NIST-800-53-SC-13 |
| 129 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 130 | ··-·low_complexity | 142 | ··-·low_complexity |
| 131 | ··-·low_disruption | 143 | ··-·low_disruption |
| 132 | ··-·medium_severity | 144 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 134 | ··-·package_dracut-fips_installed | 146 | ··-·package_dracut-fips_installed |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"dracut-fips" | ||
| 138 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | 152 | #·Remediation·is·applicable·only·in·certain·platforms |
| 145 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 153 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 160, 21 lines modified | Offset 167, 14 lines modified | ||
| 160 | include·install_dracut-fips | 167 | include·install_dracut-fips |
| 161 | class·install_dracut-fips·{ | 168 | class·install_dracut-fips·{ |
| 162 | ··package·{·'dracut-fips': | 169 | ··package·{·'dracut-fips': |
| 163 | ····ensure·=>·'installed', | 170 | ····ensure·=>·'installed', |
| 164 | ··} | 171 | ··} |
| 165 | } | 172 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=dracut-fips | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 174 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 174 | $·sudo·yum·install·dracut-fips | 175 | $·sudo·yum·install·dracut-fips |
| 175 | dracut·-f | 176 | dracut·-f |
| 176 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 177 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 177 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 178 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 178 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 179 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 202, 14 lines modified | Offset 202, 17 lines modified | ||
| 202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 214 | -·name:·Gather·the·package·facts | 216 | -·name:·Gather·the·package·facts |
| 215 | ··package_facts: | 217 | ··package_facts: |
| Offset 693, 17 lines modified | Offset 696, 14 lines modified | ||
| 693 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 696 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 694 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 697 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 695 | fi | 698 | fi |
| 696 | else | 699 | else |
| 697 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 700 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 698 | fi | 701 | fi |
| 699 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 700 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 701 | Group ·Updating·Software· Group·contains·4·rules | 702 | Group ·Updating·Software· Group·contains·4·rules |
| 702 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 703 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 703 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 704 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 704 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 705 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 705 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: | 706 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: |
| Offset 7529, 14 lines modified | Offset 7529, 26 lines modified | ||
| 7529 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 7529 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 7530 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 7530 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 7531 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 7531 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 7532 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 7532 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 7533 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 7533 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 7534 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 7534 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| Max diff block lines reached; 66413/73989 bytes (89.76%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e00:·2d3 | 00037e00:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 18220, 273 lines modified | Offset 18220, 273 lines modified | ||
| 000472b0:·2d74·6172·6765·743d·2223·6964·6d39·3837··-target="#idm987 | 000472b0:·2d74·6172·6765·743d·2223·6964·6d39·3837··-target="#idm987 | ||
| 000472c0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 000472c0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 000472d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 000472d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000472e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000472e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000472f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000472f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00047300:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00047300:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00047310:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00047310:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00047320:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00047330:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00047340:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00047350:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00047360:·7073·6522·2069·643d·2269·646d·3938·3738··pse"·id="idm9878 | |||
| 00047370:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00047380:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00047390:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000473a0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 000473b0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000473c0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000473d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000473 | 00047320:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 00047330:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00047340:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00047350:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00047360:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00047370:·643d·2269·646d·3938·3738·223e·3c70·7265··d="idm9878"><pre | |||
| 00047380:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00047390:·6573·5d5d·0a6e·616d·6520·3d20·2272·6561··es]].name·=·"rea | |||
| 000473a0:·7222·0a76·6572·7369·6f6e·203d·2022·2a22··r".version·=·"*" | |||
| 000473b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000473c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000473d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000473e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000473f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00047400:·743d·2223·6964·6d39·3837·3922·2074·6162··t="#idm9879"·tab | |||
| 00047410:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00047420:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00047430:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00047440:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00047450:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00047460:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 00047470:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 00047480:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00047490:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000474a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000474b0:·6964·3d22·6964·6d39·3837·3922·3e3c·7461··id="idm9879"><ta | |||
| 000474c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000474d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000474e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 000474f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00047500:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00047 | 00047510:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 00047 | 00047520:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00047530:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00047410:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00047420:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00047430:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00047440:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00047450:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00047460:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00047470:·3a20·456e·7375·7265·2072·6561·7220·6973··:·Ensure·rear·is | |||
| 00047480:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00047490:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 000474a0:·7265·6172·0a20·2020·2073·7461·7465·3a20··rear.····state:· | |||
| 000474b0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 000474c0:·6e6f·7420·2820·2820·2820·616e·7369·626c··not·(·(·(·ansibl | |||
| 000474d0:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | |||
| 000474e0:·3d20·2261·6172·6368·3634·2220·616e·6420··=·"aarch64"·and· | |||
| 000474f0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | |||
| 00047500:·7469·6f6e·203d·3d20·274f·7261·636c·654c··tion·==·'OracleL | |||
| 00047510:·696e·7578·270a·2020·2020·616e·6420·616e··inux'.····and·an | |||
| 00047520:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | |||
| 00047530:·6f6e·5f76·6572·7369·6f6e·2069·7320·7665··on_version·is·ve | |||
| 00047540:·7273·696f·6e28·2739·2e30·272c·2027·2667··rsion('9.0',·'&g | |||
| 00047550:·743b·3d27·2920·2920·6f72·2028·2061·6e73··t;=')·)·or·(·ans | |||
| 00047560:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | |||
| 00047570:·650a·2020·2020·3d3d·2022·6161·7263·6836··e.····==·"aarch6 | |||
| 00047580:·3422·2061·6e64·2061·6e73·6962·6c65·5f64··4"·and·ansible_d | |||
| 00047590:·6973·7472·6962·7574·696f·6e20·3d3d·2027··istribution·==·' | |||
| 000475a0:·5265·6448·6174·2720·616e·6420·616e·7369··RedHat'·and·ansi | |||
| 000475b0:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | |||
| 000475c0:·5f76·6572·7369·6f6e·0a20·2020·2069·7320··_version.····is· | |||
| 000475d0:·7665·7273·696f·6e28·2739·2e30·272c·2027··version('9.0',·' | |||
| 000475e0:·2667·743b·3d27·2920·2920·6f72·2028·2061··>=')·)·or·(·a | |||
| 000475f0:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | |||
| 00047600:·696f·6e20·3d3d·2027·5265·6448·6174·2720··ion·==·'RedHat'· | |||
| 00047610:·616e·6420·616e·7369·626c·655f·6469·7374··and·ansible_dist | |||
| 00047620:·7269·6275·7469·6f6e·5f76·6572·7369·6f6e··ribution_version | |||
| 00047630:·0a20·2020·2069·7320·7665·7273·696f·6e28··.····is·version( | |||
| 00047640:·2738·2e34·272c·2027·266c·743b·3d27·2920··'8.4',·'<=')· | |||
| 00047650:·616e·6420·616e·7369·626c·655f·6172·6368··and·ansible_arch | |||
| 00047660:·6974·6563·7475·7265·203d·3d20·2273·3339··itecture·==·"s39 | |||
| 00047670:·3078·2220·2920·2920·290a·2020·7461·6773··0x"·)·)·).··tags | |||
| 00047680:·3a0a·2020·2d20·656e·6162·6c65·5f73·7472··:.··-·enable_str | |||
| 00047690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 000476a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 000476b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 000476c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 000476d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 000476e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 000476f0:·5f72·6561·725f·696e·7374·616c·6c65·640a··_rear_installed. | |||
| 00047700:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00047710:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00047720:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00047730:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00047740:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00047750:·3d22·2369·646d·3938·3739·2220·7461·6269··="#idm9879"·tabi | |||
| 00047760:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00047770:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00047780:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00047790:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| Max diff block lines reached; 588742/626332 bytes (94.00%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:7 | 45 | ····*·cpe:/o:oracle:linux:7 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 839, 14 lines modified | Offset 839, 26 lines modified | ||
| 839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 841 | The·rear·package·can·be·installed·with·the·following·command: | 841 | The·rear·package·can·be·installed·with·the·following·command: |
| 842 | $·sudo·yum·install·rear | 842 | $·sudo·yum·install·rear |
| 843 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 843 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 844 | Severity: ·medium | 844 | Severity: ·medium |
| 845 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 845 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 847 | [[packages]] | ||
| 848 | name·=·"rear" | ||
| 849 | version·=·"*" | ||
| 850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 851 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 852 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 853 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 854 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 855 | package·--add=rear | ||
| 846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 856 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 847 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 857 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 848 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 858 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 849 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 859 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 850 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 860 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 851 | -·name:·Ensure·rear·is·installed | 861 | -·name:·Ensure·rear·is·installed |
| 852 | ··package: | 862 | ··package: |
| Offset 860, 19 lines modified | Offset 872, 14 lines modified | ||
| 860 | ··tags: | 872 | ··tags: |
| 861 | ··-·enable_strategy | 873 | ··-·enable_strategy |
| 862 | ··-·low_complexity | 874 | ··-·low_complexity |
| 863 | ··-·low_disruption | 875 | ··-·low_disruption |
| 864 | ··-·medium_severity | 876 | ··-·medium_severity |
| 865 | ··-·no_reboot_needed | 877 | ··-·no_reboot_needed |
| 866 | ··-·package_rear_installed | 878 | ··-·package_rear_installed |
| 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 868 | [[packages]] | ||
| 869 | name·=·"rear" | ||
| 870 | version·=·"*" | ||
| 871 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 879 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 872 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 880 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 873 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 881 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 874 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 882 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 875 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 883 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 876 | #·Remediation·is·applicable·only·in·certain·platforms | 884 | #·Remediation·is·applicable·only·in·certain·platforms |
| 877 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 885 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 892, 21 lines modified | Offset 899, 14 lines modified | ||
| 892 | include·install_rear | 899 | include·install_rear |
| 893 | class·install_rear·{ | 900 | class·install_rear·{ |
| 894 | ··package·{·'rear': | 901 | ··package·{·'rear': |
| 895 | ····ensure·=>·'installed', | 902 | ····ensure·=>·'installed', |
| 896 | ··} | 903 | ··} |
| 897 | } | 904 | } |
| 898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 903 | package·--add=rear | ||
| 904 | Group ·Updating·Software· Group·contains·5·rules | 905 | Group ·Updating·Software· Group·contains·5·rules |
| 905 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 906 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 906 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 907 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 907 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 908 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 908 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: | 909 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: |
| Offset 1488, 38 lines modified | Offset 1488, 14 lines modified | ||
| 1488 | ··-·PCI-DSSv4-8.3.1 | 1488 | ··-·PCI-DSSv4-8.3.1 |
| 1489 | ··-·configure_strategy | 1489 | ··-·configure_strategy |
| 1490 | ··-·high_severity | 1490 | ··-·high_severity |
| 1491 | ··-·low_complexity | 1491 | ··-·low_complexity |
| 1492 | ··-·medium_disruption | 1492 | ··-·medium_disruption |
| 1493 | ··-·no_empty_passwords | 1493 | ··-·no_empty_passwords |
| 1494 | ··-·no_reboot_needed | 1494 | ··-·no_reboot_needed |
| 1495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1496 | --- | ||
| 1497 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1498 | kind:·MachineConfig | ||
| 1499 | spec: | ||
| 1500 | ··config: | ||
| 1501 | ····ignition: | ||
| 1502 | ······version:·3.1.0 | ||
| 1503 | ····storage: | ||
| 1504 | ······files: | ||
| 1505 | ······-·contents: | ||
| 1506 | ··········source: | ||
| 1507 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1508 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1509 | ········mode:·0644 | ||
| 1510 | ········path:·/etc/pam.d/password-auth | ||
| 1511 | ········overwrite:·true | ||
| 1512 | ······-·contents: | ||
| 1513 | ··········source: | ||
| 1514 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1515 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1516 | ········mode:·0644 | ||
| 1517 | ········path:·/etc/pam.d/system-auth | ||
| 1518 | ········overwrite:·true | ||
| 1519 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1520 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1521 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1522 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1523 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1524 | #·Remediation·is·applicable·only·in·certain·platforms | 1500 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1525 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1501 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1554, 14 lines modified | Offset 1530, 38 lines modified | ||
| 1554 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1530 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1555 | fi | 1531 | fi |
| 1556 | fi | 1532 | fi |
| Max diff block lines reached; 56065/70947 bytes (79.02%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 20365, 194 lines modified | Offset 20365, 194 lines modified | ||
| 0004f8c0:·7267·6574·3d22·2369·646d·3133·3430·3622··rget="#idm13406" | 0004f8c0:·7267·6574·3d22·2369·646d·3133·3430·3622··rget="#idm13406" | ||
| 0004f8d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0004f8d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0004f8e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0004f8e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0004f8f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0004f8f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0004f900:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0004f900:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0004f910:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0004f910:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0004f920:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0004f920:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0004f930:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0004f940:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0004f950:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004f960:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004f970:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004f980:·2269·646d·3133·3430·3622·3e3c·7072·653e··"idm13406"><pre> | |||
| 0004f990:·3c63·6f64·653e·0a5b·6375·7374·6f6d·697a··<code>.[customiz | |||
| 0004f9a0:·6174·696f·6e73·2e73·6572·7669·6365·735d··ations.services] | |||
| 0004f9b0:·0a6d·6173·6b65·6420·3d20·5b22·6465·6275··.masked·=·["debu | |||
| 0004f9c0:·672d·7368·656c·6c22·5d0a·3c2f·636f·6465··g-shell"].</code | |||
| 0004f9d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004f9e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004f9f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004fa00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004fa10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004fa20:·3133·3430·3722·2074·6162·696e·6465·783d··13407"·tabindex= | |||
| 0004fa30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004fa40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004fa50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004fa60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004fa70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004fa80:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0004fa90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004faa0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004fab0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004fac0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004fad0:·3133·3430·3722·3e3c·7461·626c·6520·636c··13407"><table·cl | |||
| 0004fae0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0004faf0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0004fb00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0004fb10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0004fb20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0004fb30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004fb40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004fb50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0004fb60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004fb70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0004fb80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0004fb90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0004fba0:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 0004fbb0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0004fbc0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0004f930:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0004f940:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004f950:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0004f960:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0004f970:·6522·2069·643d·2269·646d·3133·3430·3622··e"·id="idm13406" | |||
| 0004f980:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0004f990:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0004f9a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0004f9b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0004f9c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0004f9d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0004f9e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004f9f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0004fa00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004fa10:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004fa20:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0004fa30:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0004fa40:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0004fa50:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | |||
| 0004fa60:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0004fa70:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0004fa80:·3a20·4469·7361·626c·6520·6465·6275·672d··:·Disable·debug- | |||
| 0004fa90:·7368·656c·6c20·5379·7374·656d·4420·5365··shell·SystemD·Se | |||
| 0004faa0:·7276·6963·6520·2d20·436f·6c6c·6563·7420··rvice·-·Collect· | |||
| 0004fab0:·7379·7374·656d·6420·5365·7276·6963·6573··systemd·Services | |||
| 0004fac0:·2050·7265·7365·6e74·2069·6e0a·2020·2020···Present·in.···· | |||
| 0004fad0:·7468·6520·5379·7374·656d·0a20·2061·6e73··the·System.··ans | |||
| 0004fae0:·6962·6c65·2e62·7569·6c74·696e·2e63·6f6d··ible.builtin.com | |||
| 0004faf0:·6d61·6e64·3a20·7379·7374·656d·6374·6c20··mand:·systemctl· | |||
| 0004fb00:·2d71·206c·6973·742d·756e·6974·2d66·696c··-q·list-unit-fil | |||
| 0004fb10:·6573·202d·2d74·7970·6520·7365·7276·6963··es·--type·servic | |||
| 0004fb20:·650a·2020·7265·6769·7374·6572·3a20·7365··e.··register:·se | |||
| 0004fb30:·7276·6963·655f·6578·6973·7473·0a20·2063··rvice_exists.··c | |||
| 0004fb40:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0004fb50:·7365·0a20·2066·6169·6c65·645f·7768·656e··se.··failed_when | |||
| 0004fb60:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 0004fb70:·2e72·6320·6e6f·7420·696e·205b·302c·2031··.rc·not·in·[0,·1 | |||
| 0004fb80:·5d0a·2020·6368·6563·6b5f·6d6f·6465·3a20··].··check_mode:· | |||
| 0004fb90:·6661·6c73·650a·2020·7768·656e·3a20·616e··false.··when:·an | |||
| 0004fba0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0004fbb0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0004fbc0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0004fbd0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0004fbe0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0004fbf0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0004fc00:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0004fc10:·2e35·0a20·202d·204e·4953·542d·3830·302d··.5.··-·NIST-800- | |||
| 0004fc20:·3533·2d43·4d2d·360a·2020·2d20·6469·7361··53-CM-6.··-·disa | |||
| 0004fc30:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0004fc40:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0004fc50:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0004fc60:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0004fc70:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0004fc80:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0004fc90:·7365·7276·6963·655f·6465·6275·672d·7368··service_debug-sh | |||
| 0004fca0:·656c·6c5f·6469·7361·626c·6564·0a0a·2d20··ell_disabled..-· | |||
| 0004f | 0004fbd0:·2d20·6e61·6d65·3a20·4469·7361·626c·6520··-·name:·Disable· | ||
| 0004f | 0004fbe0:·6465·6275·672d·7368·656c·6c20·5379·7374··debug-shell·Syst | ||
| 0004f | 0004fbf0:·656d·4420·5365·7276·6963·6520·2d20·436f··emD·Service·-·Co | ||
| 0004fce0:·7265·2064·6562·7567·2d73·6865·6c6c·2e73··re·debug-shell.s | |||
| 0004fc | 0004fc00:·6c6c·6563·7420·7379·7374·656d·6420·5365··llect·systemd·Se | ||
| 0004fc10:·7276·6963·6573·2050·7265·7365·6e74·2069··rvices·Present·i | |||
| Max diff block lines reached; 672816/699366 bytes (96.20%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:7 | 50 | ····*·cpe:/o:oracle:linux:7 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1202, 14 lines modified | Offset 1202, 18 lines modified | ||
| 1202 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1202 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1203 | ············_\x8c_\x8u_\x8i····3.4.5 | 1203 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1204 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1204 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1205 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1205 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1206 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1206 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1207 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1207 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1210 | [customizations.services] | ||
| 1211 | masked·=·["debug-shell"] | ||
| 1209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1214 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1217 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1215 | ····the·System | 1218 | ····the·System |
| Offset 1279, 18 lines modified | Offset 1283, 14 lines modified | ||
| 1279 | ··-·NIST-800-53-CM-6 | 1283 | ··-·NIST-800-53-CM-6 |
| 1280 | ··-·disable_strategy | 1284 | ··-·disable_strategy |
| 1281 | ··-·low_complexity | 1285 | ··-·low_complexity |
| 1282 | ··-·low_disruption | 1286 | ··-·low_disruption |
| 1283 | ··-·medium_severity | 1287 | ··-·medium_severity |
| 1284 | ··-·no_reboot_needed | 1288 | ··-·no_reboot_needed |
| 1285 | ··-·service_debug-shell_disabled | 1289 | ··-·service_debug-shell_disabled |
| 1286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1287 | [customizations.services] | ||
| 1288 | masked·=·["debug-shell"] | ||
| 1289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1294 | #·Remediation·is·applicable·only·in·certain·platforms | 1295 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1295 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1296 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1844, 38 lines modified | Offset 1844, 14 lines modified | ||
| 1844 | ··-·PCI-DSSv4-8.3.1 | 1844 | ··-·PCI-DSSv4-8.3.1 |
| 1845 | ··-·configure_strategy | 1845 | ··-·configure_strategy |
| 1846 | ··-·high_severity | 1846 | ··-·high_severity |
| 1847 | ··-·low_complexity | 1847 | ··-·low_complexity |
| 1848 | ··-·medium_disruption | 1848 | ··-·medium_disruption |
| 1849 | ··-·no_empty_passwords | 1849 | ··-·no_empty_passwords |
| 1850 | ··-·no_reboot_needed | 1850 | ··-·no_reboot_needed |
| 1851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1852 | --- | ||
| 1853 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1854 | kind:·MachineConfig | ||
| 1855 | spec: | ||
| 1856 | ··config: | ||
| 1857 | ····ignition: | ||
| 1858 | ······version:·3.1.0 | ||
| 1859 | ····storage: | ||
| 1860 | ······files: | ||
| 1861 | ······-·contents: | ||
| 1862 | ··········source: | ||
| 1863 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1864 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1865 | ········mode:·0644 | ||
| 1866 | ········path:·/etc/pam.d/password-auth | ||
| 1867 | ········overwrite:·true | ||
| 1868 | ······-·contents: | ||
| 1869 | ··········source: | ||
| 1870 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1871 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1872 | ········mode:·0644 | ||
| 1873 | ········path:·/etc/pam.d/system-auth | ||
| 1874 | ········overwrite:·true | ||
| 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1851 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1852 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1853 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1854 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1855 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1880 | #·Remediation·is·applicable·only·in·certain·platforms | 1856 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1881 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1857 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1910, 14 lines modified | Offset 1886, 38 lines modified | ||
| 1910 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1886 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1911 | fi | 1887 | fi |
| 1912 | fi | 1888 | fi |
| 1913 | else | 1889 | else |
| 1914 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1890 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1915 | fi | 1891 | fi |
| 1892 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1893 | --- | ||
| 1894 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1895 | kind:·MachineConfig | ||
| 1896 | spec: | ||
| 1897 | ··config: | ||
| 1898 | ····ignition: | ||
| 1899 | ······version:·3.1.0 | ||
| 1900 | ····storage: | ||
| 1901 | ······files: | ||
| 1902 | ······-·contents: | ||
| 1903 | ··········source: | ||
| 1904 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1905 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1906 | ········mode:·0644 | ||
| 1907 | ········path:·/etc/pam.d/password-auth | ||
| 1908 | ········overwrite:·true | ||
| 1909 | ······-·contents: | ||
| 1910 | ··········source: | ||
| 1911 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1912 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1913 | ········mode:·0644 | ||
| 1914 | ········path:·/etc/pam.d/system-auth | ||
| 1915 | ········overwrite:·true | ||
| 1916 | Group ·Restrict·Root·Logins· Group·contains·3·rules | 1916 | Group ·Restrict·Root·Logins· Group·contains·3·rules |
| 1917 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. | 1917 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. |
| 1918 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1918 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 50266/73383 bytes (68.50%) of diff not shown. | |||
| Offset 14368, 15 lines modified | Offset 14368, 15 lines modified | ||
| 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038260:·206f·6620·3230·323 | 00038260:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16570, 203 lines modified | Offset 16570, 203 lines modified | ||
| 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00040ba0:·6964·6d35·3634·3122·2074·6162·696e·6465··idm5641"·tabinde | 00040ba0:·6964·6d35·3634·3122·2074·6162·696e·6465··idm5641"·tabinde | ||
| 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00040c00:·656d·6564·6961·7469·6f6e·204 | 00040c00:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 00040c10:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 00040c20:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00040c30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040c40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040c50:·7073·6522·2069·643d·2269·646d·3536·3431··pse"·id="idm5641 | |||
| 00040c10:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00040c20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040c30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040c40:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00040c50:·646d·3536·3431·223e·3c74·6162·6c65·2063··dm5641"><table·c | |||
| 00040c60:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040c70:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040c80:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040c90:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040ca0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040cb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040cc0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00040cd0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00040ce0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00040cf0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00040d00:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00040d10:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00040d20:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00040d30:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00040d40:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00040d50:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 00040d60:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 00040d70:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 00040d80:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 00040d90:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00040da0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 00040db0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00040dc0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00040dd0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00040de0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00040df0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 00040e00:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 00040e10:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 00040e20:·5449·472d·4f4c·3037·2d30·302d·3032·3030··TIG-OL07-00-0200 | |||
| 00040e30:·3239·0a20·202d·204e·4953·542d·3830·302d··29.··-·NIST-800- | |||
| 00040e40:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 00040e50:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 00040e60:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 00040e70:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 00040e80:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 00040e90:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00040ea0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00040eb0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 00040ec0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 00040ed0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 00040ee0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 00040ef0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 00040f00:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00040f10:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00040f20:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040f30:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040f40:·6765·743d·2223·6964·6d35·3634·3222·2074··get="#idm5642"·t | |||
| 00040f50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040f60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040f70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040f80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040f90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040fa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040fb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 00040fc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 00040fd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040fe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040ff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00041000:·646d·3536·3432·223e·3c70·7265·3e3c·636f··dm5642"><pre><co | |||
| 00041010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 00041020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 00041030:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00041040:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00041050:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00041060:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00041070:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00041080:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00041090:·6964·6d35·3634·3322·2074·6162·696e·6465··idm5643"·tabinde | |||
| 000410a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 000410b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 000410c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 000410d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 000410e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 000410f0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00041100:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00041110:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00041120:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00041130:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 00041140:·3634·3322·3e3c·7461·626c·6520·636c·6173··643"><table·clas | |||
| 00041150:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00041160:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00041170:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00041180:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00041190:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000411a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000411b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 000411c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 000411d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000411e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000411f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00041200:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00041210:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00041220:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| Max diff block lines reached; 1660502/1688294 bytes (98.35%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·National·Checklist·Program·Security·Guide | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·National·Checklist·Program·Security·Guide |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ncp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ncp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:oracle:linux:7 | 62 | ····*·cpe:/o:oracle:linux:7 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 451, 14 lines modified | Offset 451, 26 lines modified | ||
| 451 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 451 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 452 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 452 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 453 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 453 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 454 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 454 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 455 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 455 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 456 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 456 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 457 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 457 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 459 | [[packages]] | ||
| 460 | name·=·"aide" | ||
| 461 | version·=·"*" | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 467 | package·--add=aide | ||
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 463 | -·name:·Ensure·aide·is·installed | 473 | -·name:·Ensure·aide·is·installed |
| 464 | ··package: | 474 | ··package: |
| Offset 473, 19 lines modified | Offset 485, 14 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 485 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·enable_strategy | 486 | ··-·enable_strategy |
| 475 | ··-·low_complexity | 487 | ··-·low_complexity |
| 476 | ··-·low_disruption | 488 | ··-·low_disruption |
| 477 | ··-·medium_severity | 489 | ··-·medium_severity |
| 478 | ··-·no_reboot_needed | 490 | ··-·no_reboot_needed |
| 479 | ··-·package_aide_installed | 491 | ··-·package_aide_installed |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 481 | [[packages]] | ||
| 482 | name·=·"aide" | ||
| 483 | version·=·"*" | ||
| 484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 485 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 486 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 487 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 488 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 489 | #·Remediation·is·applicable·only·in·certain·platforms | 497 | #·Remediation·is·applicable·only·in·certain·platforms |
| 490 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 498 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 505, 21 lines modified | Offset 512, 14 lines modified | ||
| 505 | include·install_aide | 512 | include·install_aide |
| 506 | class·install_aide·{ | 513 | class·install_aide·{ |
| 507 | ··package·{·'aide': | 514 | ··package·{·'aide': |
| 508 | ····ensure·=>·'installed', | 515 | ····ensure·=>·'installed', |
| 509 | ··} | 516 | ··} |
| 510 | } | 517 | } |
| 511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 516 | package·--add=aide | ||
| 517 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 518 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 518 | Run·the·following·command·to·generate·a·new·database: | 519 | Run·the·following·command·to·generate·a·new·database: |
| 519 | $·sudo·/usr/sbin/aide·--init | 520 | $·sudo·/usr/sbin/aide·--init |
| 520 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 521 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 521 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 522 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 522 | To·initiate·a·manual·check,·run·the·following·command: | 523 | To·initiate·a·manual·check,·run·the·following·command: |
| 523 | $·sudo·/usr/sbin/aide·--check | 524 | $·sudo·/usr/sbin/aide·--check |
| Offset 1200, 14 lines modified | Offset 1200, 26 lines modified | ||
| 1200 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 1200 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 1201 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1201 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 1206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 1207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1208 | [[packages]] | ||
| 1209 | name·=·"dracut-fips" | ||
| 1210 | version·=·"*" | ||
| 1211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1216 | package·--add=dracut-fips | ||
| 1207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1212 | -·name:·Ensure·dracut-fips·is·installed | 1222 | -·name:·Ensure·dracut-fips·is·installed |
| 1213 | ··package: | 1223 | ··package: |
| Offset 1229, 19 lines modified | Offset 1241, 14 lines modified | ||
| 1229 | ··-·NIST-800-53-SC-13 | 1241 | ··-·NIST-800-53-SC-13 |
| 1230 | ··-·enable_strategy | 1242 | ··-·enable_strategy |
| 1231 | ··-·low_complexity | 1243 | ··-·low_complexity |
| 1232 | ··-·low_disruption | 1244 | ··-·low_disruption |
| 1233 | ··-·medium_severity | 1245 | ··-·medium_severity |
| 1234 | ··-·no_reboot_needed | 1246 | ··-·no_reboot_needed |
| 1235 | ··-·package_dracut-fips_installed | 1247 | ··-·package_dracut-fips_installed |
| 1236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1237 | [[packages]] | ||
| 1238 | name·=·"dracut-fips" | ||
| 1239 | version·=·"*" | ||
| 1240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1241 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1249 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1242 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1250 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 122643/128797 bytes (95.22%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 232 lines modified | Offset 15048, 232 lines modified | ||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003acf0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ad00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003ad40:·3137·3222·3e3c·7072·653e·3c63·6f64·653e··172"><pre><code> | |||
| 0003ad50:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ad60:·6d65·203d·2022·6472·6163·7574·2d66·6970··me·=·"dracut-fip | |||
| 0003ad70:·7322·0a76·6572·7369·6f6e·203d·2022·2a22··s".version·=·"*" | |||
| 0003ad80:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ad90:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ada0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003adb0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003adc0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003add0:·743d·2223·6964·6d36·3137·3322·2074·6162··t="#idm6173"·tab | |||
| 0003ade0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003adf0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ae00:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ae10:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ae20:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ae30:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003ae40:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 0003ae50:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae60:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae70:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ae80:·6964·3d22·6964·6d36·3137·3322·3e3c·7461··id="idm6173"><ta | |||
| 0003ae90:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aea0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aeb0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003aec0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003aed0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003aee0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003aef0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af00:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003af10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003af20:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003af30:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003af40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af50:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003af60:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003af70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003af80:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003af90:·6164·643d·6472·6163·7574·2d66·6970·730a··add=dracut-fips. | |||
| 0003afa0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003afb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003afc0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003afd0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003afe0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003aff0:·3d22·2369·646d·3631·3734·2220·7461·6269··="#idm6174"·tabi | |||
| 0003b000:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b010:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b020:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b030:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b040:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003 | 0003b050:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003 | 0003b060:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003 | 0003b070:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003 | 0003b080:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003 | 0003b090:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003 | 0003b0a0:·3d22·6964·6d36·3137·3422·3e3c·7461·626c··="idm6174"><tabl | ||
| 0003 | 0003b0b0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003 | 0003b0c0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003 | 0003b0d0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003 | 0003b0e0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003 | 0003b0f0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003 | 0003b100:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003 | 0003b110:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003 | 0003b120:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003 | 0003b130:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003 | 0003b140:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003 | 0003b150:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003 | 0003b160:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003 | 0003b170:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003 | 0003b180:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003 | 0003b190:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003 | 0003b1a0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | ||
| 0003 | 0003b1b0:·6520·6472·6163·7574·2d66·6970·7320·6973··e·dracut-fips·is | ||
| 0003 | 0003b1c0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | ||
| 0003 | 0003b1d0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | ||
| 0003 | 0003b1e0:·6472·6163·7574·2d66·6970·730a·2020·2020··dracut-fips.···· | ||
| 0003 | 0003b1f0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | ||
| 0003 | 0003b200:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | ||
| 0003 | 0003b210:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 0003 | 0003b220:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 0003 | 0003b230:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 0003 | 0003b240:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 0003 | 0003b250:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 0003 | 0003b260:·225d·0a20·2020·2061·6e64·206e·6f74·2028··"].····and·not·( | ||
| 0003 | 0003b270:·206c·6f6f·6b75·7028·2265·6e76·222c·2022···lookup("env",·" | ||
| 0003 | 0003b280:·636f·6e74·6169·6e65·7222·2920·3d3d·2022··container")·==·" | ||
| 0003 | 0003b290:·6277·7261·702d·6f73·6275·696c·6422·2029··bwrap-osbuild"·) | ||
| 0003 | 0003b2a0:·2029·0a20·202d·2061·6e73·6962·6c65·5f76···).··-·ansible_v | ||
| 0003 | 0003b2b0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 0003 | 0003b2c0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 0003 | 0003b2d0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 0003 | 0003b2e0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 0003 | 0003b2f0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 0003 | 0003b300:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003 | 0003b310:·3130·2e31·2e32·0a20·202d·204e·4953·542d··10.1.2.··-·NIST- | ||
| 0003 | 0003b320:·3830·302d·3137·312d·332e·3133·2e31·310a··800-171-3.13.11. | ||
| 0003 | 0003b330:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003 | 0003b340:·2d33·2e31·332e·380a·2020·2d20·4e49·5354··-3.13.8.··-·NIST | ||
| 0003 | 0003b350:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | ||
| Max diff block lines reached; 1096267/1128061 bytes (97.18%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 92, 14 lines modified | Offset 92, 26 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"dracut-fips" | ||
| 102 | version·=·"*" | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | package·--add=dracut-fips | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | -·name:·Ensure·dracut-fips·is·installed | 114 | -·name:·Ensure·dracut-fips·is·installed |
| 105 | ··package: | 115 | ··package: |
| Offset 121, 19 lines modified | Offset 133, 14 lines modified | ||
| 121 | ··-·NIST-800-53-SC-13 | 133 | ··-·NIST-800-53-SC-13 |
| 122 | ··-·enable_strategy | 134 | ··-·enable_strategy |
| 123 | ··-·low_complexity | 135 | ··-·low_complexity |
| 124 | ··-·low_disruption | 136 | ··-·low_disruption |
| 125 | ··-·medium_severity | 137 | ··-·medium_severity |
| 126 | ··-·no_reboot_needed | 138 | ··-·no_reboot_needed |
| 127 | ··-·package_dracut-fips_installed | 139 | ··-·package_dracut-fips_installed |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"dracut-fips" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 146 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 153, 21 lines modified | Offset 160, 14 lines modified | ||
| 153 | include·install_dracut-fips | 160 | include·install_dracut-fips |
| 154 | class·install_dracut-fips·{ | 161 | class·install_dracut-fips·{ |
| 155 | ··package·{·'dracut-fips': | 162 | ··package·{·'dracut-fips': |
| 156 | ····ensure·=>·'installed', | 163 | ····ensure·=>·'installed', |
| 157 | ··} | 164 | ··} |
| 158 | } | 165 | } |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·--add=dracut-fips | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 167 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 167 | $·sudo·yum·install·dracut-fips | 168 | $·sudo·yum·install·dracut-fips |
| 168 | dracut·-f | 169 | dracut·-f |
| 169 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 170 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 170 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 171 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 171 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 172 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 195, 14 lines modified | Offset 195, 17 lines modified | ||
| 195 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 195 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 196 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 196 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 197 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 197 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 198 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 198 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·Gather·the·package·facts | 209 | -·name:·Gather·the·package·facts |
| 208 | ··package_facts: | 210 | ··package_facts: |
| Offset 686, 17 lines modified | Offset 689, 14 lines modified | ||
| 686 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 689 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 687 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 690 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 688 | fi | 691 | fi |
| 689 | else | 692 | else |
| 690 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 693 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 691 | fi | 694 | fi |
| 692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 693 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 694 | Group ·Updating·Software· Group·contains·4·rules | 695 | Group ·Updating·Software· Group·contains·4·rules |
| 695 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 696 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 696 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 697 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 697 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 698 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 698 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: | 699 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: |
| Offset 7522, 14 lines modified | Offset 7522, 26 lines modified | ||
| 7522 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 7522 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 7523 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 7523 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 7524 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 7524 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 7525 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 7525 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 7526 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 7526 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 7527 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 7527 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| Max diff block lines reached; 66413/74036 bytes (89.70%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037cf0:·3230·323 | 00037cf0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16436, 202 lines modified | Offset 16436, 202 lines modified | ||
| 00040330:·6574·3d22·2369·646d·3536·3431·2220·7461··et="#idm5641"·ta | 00040330:·6574·3d22·2369·646d·3536·3431·2220·7461··et="#idm5641"·ta | ||
| 00040340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00040340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00040350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00040350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00040360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00040360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00040370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00040370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00040380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00040380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00040390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00040390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000403a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000403b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 000403c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000403d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000403e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000403f0:·6d35·3634·3122·3e3c·7072·653e·3c63·6f64··m5641"><pre><cod | |||
| 00040400:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 00040410:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 00040420:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 000403a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000403b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000403c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000403d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000403e0:·6964·3d22·6964·6d35·3634·3122·3e3c·7461··id="idm5641"><ta | |||
| 000403f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040400:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040410:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040420:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040430:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040440:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00040450:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040460:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00040470:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040480:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00040490:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000404a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000404b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 000404c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 000404d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 000404e0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 000404f0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 00040500:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 00040510:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 00040520:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 00040530:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 00040540:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 00040550:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 00040560:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 00040570:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 00040580:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 00040590:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 000405a0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 000405b0:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | |||
| 000405c0:·2d30·3230·3032·390a·2020·2d20·4e49·5354··-020029.··-·NIST | |||
| 000405d0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 000405e0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 000405f0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 00040600:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 00040610:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 00040620:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 00040630:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 00040640:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 00040650:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 00040660:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 00040670:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 00040680:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00040690:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000406a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000406b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000406c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000406d0:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 000406e0:·3432·2220·7461·6269·6e64·6578·3d22·3022··42"·tabindex="0" | |||
| 000406f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040700:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040710:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040720:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040730:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040740:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 00040750:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00040760:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040770:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040780:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040790:·6964·3d22·6964·6d35·3634·3222·3e3c·7072··id="idm5642"><pr | |||
| 000407a0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 000407b0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 000407c0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 000407d0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 000407e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000407f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040800:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040810:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040820:·6574·3d22·2369·646d·3536·3433·2220·7461··et="#idm5643"·ta | |||
| 00040830:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040840:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040850:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040860:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040870:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040880:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040890:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 000408a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000408b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000408c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000408d0:·2269·646d·3536·3433·223e·3c74·6162·6c65··"idm5643"><table | |||
| 000408e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000408f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040900:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040910:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040920:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040930:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040940:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040950:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040960:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040970:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040980:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| Max diff block lines reached; 245094/272748 bytes (89.86%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 421, 14 lines modified | Offset 421, 26 lines modified | ||
| 421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 422 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 422 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 423 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 423 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 424 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 424 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 425 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 425 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 426 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 426 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 427 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 427 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 429 | [[packages]] | ||
| 430 | name·=·"aide" | ||
| 431 | version·=·"*" | ||
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 437 | package·--add=aide | ||
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 433 | -·name:·Ensure·aide·is·installed | 443 | -·name:·Ensure·aide·is·installed |
| 434 | ··package: | 444 | ··package: |
| Offset 443, 19 lines modified | Offset 455, 14 lines modified | ||
| 443 | ··-·PCI-DSSv4-11.5.2 | 455 | ··-·PCI-DSSv4-11.5.2 |
| 444 | ··-·enable_strategy | 456 | ··-·enable_strategy |
| 445 | ··-·low_complexity | 457 | ··-·low_complexity |
| 446 | ··-·low_disruption | 458 | ··-·low_disruption |
| 447 | ··-·medium_severity | 459 | ··-·medium_severity |
| 448 | ··-·no_reboot_needed | 460 | ··-·no_reboot_needed |
| 449 | ··-·package_aide_installed | 461 | ··-·package_aide_installed |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 451 | [[packages]] | ||
| 452 | name·=·"aide" | ||
| 453 | version·=·"*" | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 459 | #·Remediation·is·applicable·only·in·certain·platforms | 467 | #·Remediation·is·applicable·only·in·certain·platforms |
| 460 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 468 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 475, 21 lines modified | Offset 482, 14 lines modified | ||
| 475 | include·install_aide | 482 | include·install_aide |
| 476 | class·install_aide·{ | 483 | class·install_aide·{ |
| 477 | ··package·{·'aide': | 484 | ··package·{·'aide': |
| 478 | ····ensure·=>·'installed', | 485 | ····ensure·=>·'installed', |
| 479 | ··} | 486 | ··} |
| 480 | } | 487 | } |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 486 | package·--add=aide | ||
| 487 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 488 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 488 | Run·the·following·command·to·generate·a·new·database: | 489 | Run·the·following·command·to·generate·a·new·database: |
| 489 | $·sudo·/usr/sbin/aide·--init | 490 | $·sudo·/usr/sbin/aide·--init |
| 490 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 491 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 491 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 492 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 492 | To·initiate·a·manual·check,·run·the·following·command: | 493 | To·initiate·a·manual·check,·run·the·following·command: |
| 493 | $·sudo·/usr/sbin/aide·--check | 494 | $·sudo·/usr/sbin/aide·--check |
| Offset 7929, 14 lines modified | Offset 7929, 17 lines modified | ||
| 7929 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 7929 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 7930 | ············_\x8n_\x8i_\x8s_\x8t···········IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7930 | ············_\x8n_\x8i_\x8s_\x8t···········IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7931 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 7931 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 7932 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.3 | 7932 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.3 |
| 7933 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000104-GPOS-00051,·SRG-OS-000106-GPOS-00053,·SRG-OS-000107-GPOS-00054,·SRG-OS-000108-GPOS-00055,·SRG-OS-000108-GPOS-00057,·SRG-OS-000108-GPOS-00058,·SRG-OS-000109-GPOS-00056,·SRG-OS-000376-GPOS-00161,·SRG-OS-000377-GPOS-00162 | 7933 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000104-GPOS-00051,·SRG-OS-000106-GPOS-00053,·SRG-OS-000107-GPOS-00054,·SRG-OS-000108-GPOS-00055,·SRG-OS-000108-GPOS-00057,·SRG-OS-000108-GPOS-00058,·SRG-OS-000109-GPOS-00056,·SRG-OS-000376-GPOS-00161,·SRG-OS-000377-GPOS-00162 |
| 7934 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010500 | 7934 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010500 |
| 7935 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221703r818811_rule | 7935 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221703r818811_rule |
| 7936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7937 | package·--add=pam_pkcs11·--add=esc | ||
| 7936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7938 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7937 | #·Remediation·is·applicable·only·in·certain·platforms | 7939 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7938 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·!·grep·-q·s390x·/proc/sys/kernel/osrelease;·};·then | 7940 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·!·grep·-q·s390x·/proc/sys/kernel/osrelease;·};·then |
| 7939 | #·Install·required·packages | 7941 | #·Install·required·packages |
| 7940 | if·!·rpm·-q·--quiet·"esc"·;·then | 7942 | if·!·rpm·-q·--quiet·"esc"·;·then |
| 7941 | ····yum·install·-y·"esc" | 7943 | ····yum·install·-y·"esc" |
| Offset 8043, 17 lines modified | Offset 8046, 14 lines modified | ||
| 8043 | #·2)·Then·append·'ocsp_on'·value·setting·to·each·'cert_policy'·key·in·$PAM_PKCS11_CONF·configuration·line, | 8046 | #·2)·Then·append·'ocsp_on'·value·setting·to·each·'cert_policy'·key·in·$PAM_PKCS11_CONF·configuration·line, |
| 8044 | #·which·does·not·contain·it·yet | 8047 | #·which·does·not·contain·it·yet |
| 8045 | sed·-i·"/ocsp_on/!·s/^[$SP]*cert_policy[$SP]\+=[$SP]\+\(.*\);/\t\tcert_policy·=·\1,·ocsp_on;/"·"$PAM_PKCS11_CONF" | 8048 | sed·-i·"/ocsp_on/!·s/^[$SP]*cert_policy[$SP]\+=[$SP]\+\(.*\);/\t\tcert_policy·=·\1,·ocsp_on;/"·"$PAM_PKCS11_CONF" |
| 8046 | else | 8049 | else |
| 8047 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8050 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8048 | fi | 8051 | fi |
| 8049 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8050 | package·--add=pam_pkcs11·--add=esc | ||
| 8051 | Group ·Protect·Accounts·by·Restricting·Password-Based·Login· Group·contains·3·groups·and·6·rules | 8052 | Group ·Protect·Accounts·by·Restricting·Password-Based·Login· Group·contains·3·groups·and·6·rules |
| 8052 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Conventionally,·Unix·shell·accounts·are·accessed·by·providing·a·username·and·password·to·a·login·program,·which·tests·these·values·for·correctness·using·the·/etc/passwd·and·/etc/shadow·files.·Password-based·login·is·vulnerable·to·guessing·of·weak·passwords,·and·to·sniffing·and·man-in-the-middle·attacks·against·passwords·entered·over·a·network·or·at·an·insecure·console.·Therefore,·mechanisms·for·accessing·accounts·by·entering·usernames·and·passwords·should·be·restricted·to·those·which·are·operationally·necessary. | 8053 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Conventionally,·Unix·shell·accounts·are·accessed·by·providing·a·username·and·password·to·a·login·program,·which·tests·these·values·for·correctness·using·the·/etc/passwd·and·/etc/shadow·files.·Password-based·login·is·vulnerable·to·guessing·of·weak·passwords,·and·to·sniffing·and·man-in-the-middle·attacks·against·passwords·entered·over·a·network·or·at·an·insecure·console.·Therefore,·mechanisms·for·accessing·accounts·by·entering·usernames·and·passwords·should·be·restricted·to·those·which·are·operationally·necessary. |
| 8053 | Group ·Set·Account·Expiration·Parameters· Group·contains·2·rules | 8054 | Group ·Set·Account·Expiration·Parameters· Group·contains·2·rules |
| 8054 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Accounts·can·be·configured·to·be·automatically·disabled·after·a·certain·time·period,·meaning·that·they·will·require·administrator·interaction·to·become·usable·again.·Expiration·of·accounts·after·inactivity·can·be·set·for·all·accounts·by·default·and·also·on·a·per-account·basis,·such·as·for·accounts·that·are·known·to·be·temporary.·To·configure·automatic·expiration·of·an·account·following·the·expiration·of·its·password·(that·is,·after·the·password·has·expired·and·not·been·changed),·run·the·following·command,·substituting·NUM_DAYS·and·USER·appropriately: | 8055 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Accounts·can·be·configured·to·be·automatically·disabled·after·a·certain·time·period,·meaning·that·they·will·require·administrator·interaction·to·become·usable·again.·Expiration·of·accounts·after·inactivity·can·be·set·for·all·accounts·by·default·and·also·on·a·per-account·basis,·such·as·for·accounts·that·are·known·to·be·temporary.·To·configure·automatic·expiration·of·an·account·following·the·expiration·of·its·password·(that·is,·after·the·password·has·expired·and·not·been·changed),·run·the·following·command,·substituting·NUM_DAYS·and·USER·appropriately: |
| 8055 | $·sudo·chage·-I·NUM_DAYS·USER | 8056 | $·sudo·chage·-I·NUM_DAYS·USER |
| 8056 | Accounts,·such·as·temporary·accounts,·can·also·be·configured·to·expire·on·an·explicitly-set·date·with·the·-E·option.·The·file·/etc/default/useradd·controls·default·settings·for·all·newly-created·accounts·created·with·the·system's·normal·command·line·utilities. | 8057 | Accounts,·such·as·temporary·accounts,·can·also·be·configured·to·expire·on·an·explicitly-set·date·with·the·-E·option.·The·file·/etc/default/useradd·controls·default·settings·for·all·newly-created·accounts·created·with·the·system's·normal·command·line·utilities. |
| 8057 | Warning: ·This·will·only·apply·to·newly·created·accounts | 8058 | Warning: ·This·will·only·apply·to·newly·created·accounts |
| Offset 8470, 38 lines modified | Offset 8470, 14 lines modified | ||
| 8470 | ··-·PCI-DSSv4-8.3.1 | 8470 | ··-·PCI-DSSv4-8.3.1 |
| 8471 | ··-·configure_strategy | 8471 | ··-·configure_strategy |
| 8472 | ··-·high_severity | 8472 | ··-·high_severity |
| 8473 | ··-·low_complexity | 8473 | ··-·low_complexity |
| 8474 | ··-·medium_disruption | 8474 | ··-·medium_disruption |
| 8475 | ··-·no_empty_passwords | 8475 | ··-·no_empty_passwords |
| Max diff block lines reached; 27910/35656 bytes (78.28%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d70:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d70:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d80:·313 | 00037d80:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 00039410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039440:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039450:·3d22·6964·6d39·3033·3322·3e3c·7072·653e··="idm9033"><pre> | |||
| 00039460:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00039470:·735d·5d0a·6e61·6d65·203d·2022·676c·6962··s]].name·=·"glib | |||
| 00039480:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039490:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000394a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000394b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000394c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000394d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000394e0:·743d·2223·6964·6d39·3033·3422·2074·6162··t="#idm9034"·tab | |||
| 000394f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039500:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039400:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039410:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039420:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039430:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039440:·7365·2220·6964·3d22·6964·6d39·3033·3322··se"·id="idm9033" | |||
| 00039450:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039460:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039470:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039480:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039490:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000394a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000394b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000394c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000394d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000394e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000394f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039500:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039510:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039520:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039530:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039540:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00039550:·2045·6e73·7572·6520·676c·6962·6320·6973···Ensure·glibc·is | |||
| 00039560:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039570:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039580:·676c·6962·630a·2020·2020·7374·6174·653a··glibc.····state: | |||
| 00039590:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 000395a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000395b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000395c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000395d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000395e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000395f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039600:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039610:·676c·6962·635f·696e·7374·616c·6c65·640a··glibc_installed. | |||
| 00039620:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00039630:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00039640:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00039650:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00039660:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00039670:·3d22·2369·646d·3930·3334·2220·7461·6269··="#idm9034"·tabi | |||
| 00039680:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039690:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00039 | 00039510:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 000396b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 000396c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 000396d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 00039 | 00039520:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039530:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039540:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 00039550:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 00039560:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00039570:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00039580:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00039590:·6964·3d22·6964·6d39·3033·3422·3e3c·7461··id="idm9034"><ta | |||
| 000395a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000395b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000395c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 000395d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 000395e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 000395f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00039600:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039610:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00039620:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039630:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00039640:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00039650:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039660:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00039670:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00039680:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00039690:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 000396a0:·6164·643d·676c·6962·630a·3c2f·636f·6465··add=glibc.</code | |||
| 000396b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000396c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 000396d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 000396e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 000396f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039700:·3930·3335·2220·7461·6269·6e64·6578·3d22··9035"·tabindex=" | |||
| 00039710:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00039720:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00039730:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00039740:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00039750:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00039760:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00039 | 00039770:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 000397 | 00039780:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 000397 | 00039790:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| Max diff block lines reached; 127100/151442 bytes (83.93%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:oracle:linux:7 | 43 | ····*·cpe:/o:oracle:linux:7 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 64, 14 lines modified | Offset 64, 26 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | [[packages]] | ||
| 73 | name·=·"glibc" | ||
| 74 | version·=·"*" | ||
| 75 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 76 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 77 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 78 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 79 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 80 | package·--add=glibc | ||
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 81 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 82 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 83 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 84 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 85 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 76 | -·name:·Ensure·glibc·is·installed | 86 | -·name:·Ensure·glibc·is·installed |
| 77 | ··package: | 87 | ··package: |
| Offset 80, 19 lines modified | Offset 92, 14 lines modified | ||
| 80 | ··tags: | 92 | ··tags: |
| 81 | ··-·enable_strategy | 93 | ··-·enable_strategy |
| 82 | ··-·low_complexity | 94 | ··-·low_complexity |
| 83 | ··-·low_disruption | 95 | ··-·low_disruption |
| 84 | ··-·medium_severity | 96 | ··-·medium_severity |
| 85 | ··-·no_reboot_needed | 97 | ··-·no_reboot_needed |
| 86 | ··-·package_glibc_installed | 98 | ··-·package_glibc_installed |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"glibc" | ||
| 90 | version·=·"*" | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | if·!·rpm·-q·--quiet·"glibc"·;·then | 104 | if·!·rpm·-q·--quiet·"glibc"·;·then |
| Offset 106, 29 lines modified | Offset 113, 34 lines modified | ||
| 106 | include·install_glibc | 113 | include·install_glibc |
| 107 | class·install_glibc·{ | 114 | class·install_glibc·{ |
| 108 | ··package·{·'glibc': | 115 | ··package·{·'glibc': |
| 109 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 110 | ··} | 117 | ··} |
| 111 | } | 118 | } |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=glibc | ||
| 118 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 119 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 119 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | 120 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated |
| 120 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | 121 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information |
| 121 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | 122 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: |
| 122 | $·sudo·yum·install·uuidd | 123 | $·sudo·yum·install·uuidd |
| 123 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | 124 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. |
| 124 | Severity: ·medium | 125 | Severity: ·medium |
| 125 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | 126 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"uuidd" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=uuidd | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·uuidd·is·installed | 142 | -·name:·Ensure·uuidd·is·installed |
| 132 | ··package: | 143 | ··package: |
| Offset 137, 19 lines modified | Offset 149, 14 lines modified | ||
| 137 | ··tags: | 149 | ··tags: |
| 138 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 151 | ··-·low_complexity |
| 140 | ··-·low_disruption | 152 | ··-·low_disruption |
| 141 | ··-·medium_severity | 153 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 143 | ··-·package_uuidd_installed | 155 | ··-·package_uuidd_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"uuidd" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | if·!·rpm·-q·--quiet·"uuidd"·;·then | 161 | if·!·rpm·-q·--quiet·"uuidd"·;·then |
| Offset 163, 21 lines modified | Offset 170, 14 lines modified | ||
| 163 | include·install_uuidd | 170 | include·install_uuidd |
| Max diff block lines reached; 10117/15754 bytes (64.22%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d40:·2d31·3 | 00037d40:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 19301, 692 lines modified | Offset 19301, 692 lines modified | ||
| 0004b640:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004b640:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004b650:·3d22·2369·646d·3135·3839·3122·2074·6162··="#idm15891"·tab | 0004b650:·3d22·2369·646d·3135·3839·3122·2074·6162··="#idm15891"·tab | ||
| 0004b660:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0004b660:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0004b670:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0004b670:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0004b680:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0004b680:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0004b690:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0004b690:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0004b6a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0004b6a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0004b6b0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0004b6b0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0004b6c0:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0004b6d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004b6e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004b6f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004b700:·2220·6964·3d22·6964·6d31·3538·3931·223e··"·id="idm15891"> | |||
| 0004b710:·3c70·7265·3e3c·636f·6465·3e2d·2d2d·0a61··<pre><code>---.a | |||
| 0004b720:·7069·5665·7273·696f·6e3a·206d·6163·6869··piVersion:·machi | |||
| 0004b730:·6e65·636f·6e66·6967·7572·6174·696f·6e2e··neconfiguration. | |||
| 0004b | 0004b6c0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0004b6d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004b6e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004b6f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004b700:·6964·6d31·3538·3931·223e·3c74·6162·6c65··idm15891"><table | |||
| 0004b710:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0004b720:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0004b730:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0004b740:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0004b750:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0004b760:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004b770:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004b780:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004b790:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0004b7a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004b7b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0004b7c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004b7d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0004b7e0:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | |||
| 0004b7f0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004b800:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0004b810:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0004b820:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0004b830:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0004b840:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0004b850:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0004b860:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0004b870:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0004b880:·656e·0a0a·6966·205b·202d·6620·2f75·7372··en..if·[·-f·/usr | |||
| 0004b890:·2f62·696e·2f61·7574·6873·656c·6563·7420··/bin/authselect· | |||
| 0004b8a0:·5d3b·2074·6865·6e0a·2020·2020·6966·2021··];·then.····if·! | |||
| 0004b8b0:·2061·7574·6873·656c·6563·7420·6368·6563···authselect·chec | |||
| 0004b8c0:·6b3b·2074·6865·6e0a·6563·686f·2022·0a61··k;·then.echo·".a | |||
| 0004b8d0:·7574·6873·656c·6563·7420·696e·7465·6772··uthselect·integr | |||
| 0004b8e0:·6974·7920·6368·6563·6b20·6661·696c·6564··ity·check·failed | |||
| 0004b8f0:·2e20·5265·6d65·6469·6174·696f·6e20·6162··.·Remediation·ab | |||
| 0004b900:·6f72·7465·6421·0a54·6869·7320·7265·6d65··orted!.This·reme | |||
| 0004b910:·6469·6174·696f·6e20·636f·756c·6420·6e6f··diation·could·no | |||
| 0004b920:·7420·6265·2061·7070·6c69·6564·2062·6563··t·be·applied·bec | |||
| 0004b930:·6175·7365·2061·6e20·6175·7468·7365·6c65··ause·an·authsele | |||
| 0004b940:·6374·2070·726f·6669·6c65·2077·6173·206e··ct·profile·was·n | |||
| 0004b950:·6f74·2073·656c·6563·7465·6420·6f72·2074··ot·selected·or·t | |||
| 0004b960:·6865·2073·656c·6563·7465·6420·7072·6f66··he·selected·prof | |||
| 0004b970:·696c·6520·6973·206e·6f74·2069·6e74·6163··ile·is·not·intac | |||
| 0004b980:·742e·0a49·7420·6973·206e·6f74·2072·6563··t..It·is·not·rec | |||
| 0004b990:·6f6d·6d65·6e64·6564·2074·6f20·6d61·6e75··ommended·to·manu | |||
| 0004b9a0:·616c·6c79·2065·6469·7420·7468·6520·5041··ally·edit·the·PA | |||
| 0004b9b0:·4d20·6669·6c65·7320·7768·656e·2061·7574··M·files·when·aut | |||
| 0004b9c0:·6873·656c·6563·7420·746f·6f6c·2069·7320··hselect·tool·is· | |||
| 0004b9d0:·6176·6169·6c61·626c·652e·0a49·6e20·6361··available..In·ca | |||
| 0004b9e0:·7365·7320·7768·6572·6520·7468·6520·6465··ses·where·the·de | |||
| 0004b9f0:·6661·756c·7420·6175·7468·7365·6c65·6374··fault·authselect | |||
| 0004ba00:·2070·726f·6669·6c65·2064·6f65·7320·6e6f···profile·does·no | |||
| 0004ba10:·7420·636f·7665·7220·6120·7370·6563·6966··t·cover·a·specif | |||
| 0004ba20:·6963·2064·656d·616e·642c·2061·2063·7573··ic·demand,·a·cus | |||
| 0004ba30:·746f·6d20·6175·7468·7365·6c65·6374·2070··tom·authselect·p | |||
| 0004ba40:·726f·6669·6c65·2069·7320·7265·636f·6d6d··rofile·is·recomm | |||
| 0004ba50:·656e·6465·642e·220a·6578·6974·2031·0a66··ended.".exit·1.f | |||
| 0004ba60:·690a·6175·7468·7365·6c65·6374·2065·6e61··i.authselect·ena | |||
| 0004ba70:·626c·652d·6665·6174·7572·6520·7769·7468··ble-feature·with | |||
| 0004ba80:·6f75·742d·6e75·6c6c·6f6b·0a0a·6175·7468··out-nullok..auth | |||
| 0004ba90:·7365·6c65·6374·2061·7070·6c79·2d63·6861··select·apply-cha | |||
| 0004baa0:·6e67·6573·202d·620a·656c·7365·0a20·2020··nges·-b.else.··· | |||
| 0004bab0:·200a·6966·2067·7265·7020·2d71·5020·225e···.if·grep·-qP·"^ | |||
| 0004bac0:·5c73·2a61·7574·685c·732b·7375·6666·6963··\s*auth\s+suffic | |||
| 0004bad0:·6965·6e74·5c73·2b70·616d·5f75·6e69·782e··ient\s+pam_unix. | |||
| 0004bae0:·736f·5c73·2e2a·5c62·6e75·6c6c·6f6b·5c62··so\s.*\bnullok\b | |||
| 0004baf0:·2220·222f·6574·632f·7061·6d2e·642f·7379··"·"/etc/pam.d/sy | |||
| 0004bb00:·7374·656d·2d61·7574·6822·3b20·7468·656e··stem-auth";·then | |||
| 0004bb10:·0a20·2020·2073·6564·202d·6920·2d45·202d··.····sed·-i·-E·- | |||
| 0004bb20:·2d66·6f6c·6c6f·772d·7379·6d6c·696e·6b73··-follow-symlinks | |||
| 0004bb30:·2022·732f·282e·2a61·7574·682e·2a73·7566···"s/(.*auth.*suf | |||
| 0004bb40:·6669·6369·656e·742e·2a70·616d·5f75·6e69··ficient.*pam_uni | |||
| 0004bb50:·782e·736f·2e2a·295c·736e·756c·6c6f·6b3d··x.so.*)\snullok= | |||
| 0004bb60:·3f5b·5b3a·616c·6e75·6d3a·5d5d·2a28·2e2a··?[[:alnum:]]*(.* | |||
| 0004bb70:·292f·5c31·5c32·2f67·2220·222f·6574·632f··)/\1\2/g"·"/etc/ | |||
| 0004bb80:·7061·6d2e·642f·7379·7374·656d·2d61·7574··pam.d/system-aut | |||
| 0004bb90:·6822·0a66·690a·2020·2020·0a69·6620·6772··h".fi.····.if·gr | |||
| 0004bba0:·6570·202d·7150·2022·5e5c·732a·7061·7373··ep·-qP·"^\s*pass | |||
| 0004bbb0:·776f·7264·5c73·2b73·7566·6669·6369·656e··word\s+sufficien | |||
| 0004bbc0:·745c·732b·7061·6d5f·756e·6978·2e73·6f5c··t\s+pam_unix.so\ | |||
| 0004bbd0:·732e·2a5c·626e·756c·6c6f·6b5c·6222·2022··s.*\bnullok\b"·" | |||
| 0004bbe0:·2f65·7463·2f70·616d·2e64·2f73·7973·7465··/etc/pam.d/syste | |||
| 0004bbf0:·6d2d·6175·7468·223b·2074·6865·6e0a·2020··m-auth";·then.·· | |||
| 0004bc00:·2020·7365·6420·2d69·202d·4520·2d2d·666f····sed·-i·-E·--fo | |||
| 0004bc10:·6c6c·6f77·2d73·796d·6c69·6e6b·7320·2273··llow-symlinks·"s | |||
| 0004bc20:·2f28·2e2a·7061·7373·776f·7264·2e2a·7375··/(.*password.*su | |||
| 0004bc30:·6666·6963·6965·6e74·2e2a·7061·6d5f·756e··fficient.*pam_un | |||
| 0004bc40:·6978·2e73·6f2e·2a29·5c73·6e75·6c6c·6f6b··ix.so.*)\snullok | |||
| 0004bc50:·3d3f·5b5b·3a61·6c6e·756d·3a5d·5d2a·282e··=?[[:alnum:]]*(. | |||
| 0004bc60:·2a29·2f5c·315c·322f·6722·2022·2f65·7463··*)/\1\2/g"·"/etc | |||
| 0004bc70:·2f70·616d·2e64·2f73·7973·7465·6d2d·6175··/pam.d/system-au | |||
| 0004bc80:·7468·220a·6669·0a20·2020·200a·6966·2067··th".fi.····.if·g | |||
| 0004bc90:·7265·7020·2d71·5020·225e·5c73·2a61·7574··rep·-qP·"^\s*aut | |||
| Max diff block lines reached; 291223/323293 bytes (90.08%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:7 | 42 | ····*·cpe:/o:oracle:linux:7 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 858, 38 lines modified | Offset 858, 14 lines modified | ||
| 858 | ··-·PCI-DSSv4-8.3.1 | 858 | ··-·PCI-DSSv4-8.3.1 |
| 859 | ··-·configure_strategy | 859 | ··-·configure_strategy |
| 860 | ··-·high_severity | 860 | ··-·high_severity |
| 861 | ··-·low_complexity | 861 | ··-·low_complexity |
| 862 | ··-·medium_disruption | 862 | ··-·medium_disruption |
| 863 | ··-·no_empty_passwords | 863 | ··-·no_empty_passwords |
| 864 | ··-·no_reboot_needed | 864 | ··-·no_reboot_needed |
| 865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 866 | --- | ||
| 867 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 868 | kind:·MachineConfig | ||
| 869 | spec: | ||
| 870 | ··config: | ||
| 871 | ····ignition: | ||
| 872 | ······version:·3.1.0 | ||
| 873 | ····storage: | ||
| 874 | ······files: | ||
| 875 | ······-·contents: | ||
| 876 | ··········source: | ||
| 877 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 878 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 879 | ········mode:·0644 | ||
| 880 | ········path:·/etc/pam.d/password-auth | ||
| 881 | ········overwrite:·true | ||
| 882 | ······-·contents: | ||
| 883 | ··········source: | ||
| 884 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 885 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 886 | ········mode:·0644 | ||
| 887 | ········path:·/etc/pam.d/system-auth | ||
| 888 | ········overwrite:·true | ||
| 889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 890 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 891 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 892 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 893 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 894 | #·Remediation·is·applicable·only·in·certain·platforms | 870 | #·Remediation·is·applicable·only·in·certain·platforms |
| 895 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 871 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 924, 14 lines modified | Offset 900, 38 lines modified | ||
| 924 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 900 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 925 | fi | 901 | fi |
| 926 | fi | 902 | fi |
| 927 | else | 903 | else |
| 928 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 904 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 929 | fi | 905 | fi |
| 906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 907 | --- | ||
| 908 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 909 | kind:·MachineConfig | ||
| 910 | spec: | ||
| 911 | ··config: | ||
| 912 | ····ignition: | ||
| 913 | ······version:·3.1.0 | ||
| 914 | ····storage: | ||
| 915 | ······files: | ||
| 916 | ······-·contents: | ||
| 917 | ··········source: | ||
| 918 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 919 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 920 | ········mode:·0644 | ||
| 921 | ········path:·/etc/pam.d/password-auth | ||
| 922 | ········overwrite:·true | ||
| 923 | ······-·contents: | ||
| 924 | ··········source: | ||
| 925 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 926 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 927 | ········mode:·0644 | ||
| 928 | ········path:·/etc/pam.d/system-auth | ||
| 929 | ········overwrite:·true | ||
| 930 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 930 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 931 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 931 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 932 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 932 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 933 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 933 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 934 | #·echo·$PATH | 934 | #·echo·$PATH |
| 935 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 935 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1027, 14 lines modified | Offset 1027, 26 lines modified | ||
| 1027 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 1027 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 1028 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1028 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1029 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1029 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1030 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1030 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1031 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1031 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1032 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1032 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1033 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1033 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1035 | [[packages]] | ||
| 1036 | name·=·"rsyslog" | ||
| 1037 | version·=·"*" | ||
| 1038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1043 | package·--add=rsyslog | ||
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1035 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1036 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1037 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1038 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1039 | -·name:·Ensure·rsyslog·is·installed | 1049 | -·name:·Ensure·rsyslog·is·installed |
| 1040 | ··package: | 1050 | ··package: |
| Offset 1045, 19 lines modified | Offset 1057, 14 lines modified | ||
| 1045 | ··-·NIST-800-53-CM-6(a) | 1057 | ··-·NIST-800-53-CM-6(a) |
| 1046 | ··-·enable_strategy | 1058 | ··-·enable_strategy |
| 1047 | ··-·low_complexity | 1059 | ··-·low_complexity |
| 1048 | ··-·low_disruption | 1060 | ··-·low_disruption |
| 1049 | ··-·medium_severity | 1061 | ··-·medium_severity |
| 1050 | ··-·no_reboot_needed | 1062 | ··-·no_reboot_needed |
| Max diff block lines reached; 19530/41162 bytes (47.45%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2028·6173·206f·6620·3230·323 | 00037cc0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037cd0:·3 | 00037cd0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17112, 203 lines modified | Offset 17112, 203 lines modified | ||
| 00042d70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00042d70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00042d80:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | 00042d80:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | ||
| 00042d90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00042d90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00042da0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00042da0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00042db0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00042db0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00042dc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00042dc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00042dd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00042dd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00042de0:·6564·6961·7469·6f6e·204 | 00042de0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00042df0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 00042e00:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00042e10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00042e20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00042e30:·6522·2069·643d·2269·646d·3536·3431·223e··e"·id="idm5641"> | |||
| 00042df0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00042e00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00042e10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00042e20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00042e30:·3536·3431·223e·3c74·6162·6c65·2063·6c61··5641"><table·cla | |||
| 00042e40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00042e50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00042e60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00042e70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00042e80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00042e90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00042ea0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00042eb0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00042ec0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00042ed0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00042ee0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00042ef0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00042f00:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00042f10:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00042f20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00042f30:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 00042f40:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 00042f50:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00042f60:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 00042f70:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00042f80:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00042f90:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00042fa0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00042fb0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00042fc0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00042fd0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00042fe0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 00042ff0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 00043000:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 00043010:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00043020:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00043030:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00043040:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00043050:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00043060:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00043070:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00043080:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00043090:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 000430a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 000430b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 000430c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 000430d0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000430e0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000430f0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00043100:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00043110:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00043120:·743d·2223·6964·6d35·3634·3222·2074·6162··t="#idm5642"·tab | |||
| 00043130:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00043140:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00043150:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00043160:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00043170:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00043180:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 00043190:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 000431a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000431b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000431c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000431d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000431e0:·3536·3432·223e·3c70·7265·3e3c·636f·6465··5642"><pre><code | |||
| 000431f0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 00043200:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 00043210:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00043220:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00043230:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00043240:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00043250:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00043260:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00043270:·6d35·3634·3322·2074·6162·696e·6465·783d··m5643"·tabindex= | |||
| 00043280:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00043290:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 000432a0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 000432b0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 000432c0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 000432d0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 000432e0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 000432f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00043300:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00043310:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 00043320:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00043330:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00043340:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00043350:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00043360:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00043370:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00043380:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00043390:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 000433a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000433b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000433c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 000433d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 000433e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000433f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| Max diff block lines reached; 691729/719659 bytes (96.12%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 570, 14 lines modified | Offset 570, 26 lines modified | ||
| 570 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 570 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 573 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 573 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 574 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 574 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 576 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 576 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 578 | [[packages]] | ||
| 579 | name·=·"aide" | ||
| 580 | version·=·"*" | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 586 | package·--add=aide | ||
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 582 | -·name:·Ensure·aide·is·installed | 592 | -·name:·Ensure·aide·is·installed |
| 583 | ··package: | 593 | ··package: |
| Offset 592, 19 lines modified | Offset 604, 14 lines modified | ||
| 592 | ··-·PCI-DSSv4-11.5.2 | 604 | ··-·PCI-DSSv4-11.5.2 |
| 593 | ··-·enable_strategy | 605 | ··-·enable_strategy |
| 594 | ··-·low_complexity | 606 | ··-·low_complexity |
| 595 | ··-·low_disruption | 607 | ··-·low_disruption |
| 596 | ··-·medium_severity | 608 | ··-·medium_severity |
| 597 | ··-·no_reboot_needed | 609 | ··-·no_reboot_needed |
| 598 | ··-·package_aide_installed | 610 | ··-·package_aide_installed |
| 599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 600 | [[packages]] | ||
| 601 | name·=·"aide" | ||
| 602 | version·=·"*" | ||
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 604 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 605 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 606 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 607 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 608 | #·Remediation·is·applicable·only·in·certain·platforms | 616 | #·Remediation·is·applicable·only·in·certain·platforms |
| 609 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 617 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 624, 21 lines modified | Offset 631, 14 lines modified | ||
| 624 | include·install_aide | 631 | include·install_aide |
| 625 | class·install_aide·{ | 632 | class·install_aide·{ |
| 626 | ··package·{·'aide': | 633 | ··package·{·'aide': |
| 627 | ····ensure·=>·'installed', | 634 | ····ensure·=>·'installed', |
| 628 | ··} | 635 | ··} |
| 629 | } | 636 | } |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 635 | package·--add=aide | ||
| 636 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 637 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 637 | Run·the·following·command·to·generate·a·new·database: | 638 | Run·the·following·command·to·generate·a·new·database: |
| 638 | $·sudo·/usr/sbin/aide·--init | 639 | $·sudo·/usr/sbin/aide·--init |
| 639 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 640 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 640 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 641 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 641 | To·initiate·a·manual·check,·run·the·following·command: | 642 | To·initiate·a·manual·check,·run·the·following·command: |
| 642 | $·sudo·/usr/sbin/aide·--check | 643 | $·sudo·/usr/sbin/aide·--check |
| Offset 1335, 14 lines modified | Offset 1335, 17 lines modified | ||
| 1335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1337 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1337 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1339 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 1339 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 1340 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 1340 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 1341 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 1341 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 1342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1343 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 1342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 1345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 1344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1347 | -·name:·Gather·the·package·facts | 1349 | -·name:·Gather·the·package·facts |
| 1348 | ··package_facts: | 1350 | ··package_facts: |
| Offset 1826, 17 lines modified | Offset 1829, 14 lines modified | ||
| 1826 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 1829 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 1827 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 1830 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 1828 | fi | 1831 | fi |
| 1829 | else | 1832 | else |
| 1830 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1833 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1831 | fi | 1834 | fi |
| 1832 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1833 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 1834 | Group ·Operating·System·Vendor·Support·and·Certification· Group·contains·1·rule | 1835 | Group ·Operating·System·Vendor·Support·and·Certification· Group·contains·1·rule |
| 1835 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·assurance·of·a·vendor·to·provide·operating·system·support·and·maintenance·for·their·product·is·an·important·criterion·to·ensure·product·stability·and·security·over·the·life·of·the·product.·A·certified·product·that·follows·the·necessary·standards·and·government·certification·requirements·guarantees·that·known·software·vulnerabilities·will·be·remediated,·and·proper·guidance·for·protecting·and·securing·the·operating·system·will·be·given. | 1836 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·assurance·of·a·vendor·to·provide·operating·system·support·and·maintenance·for·their·product·is·an·important·criterion·to·ensure·product·stability·and·security·over·the·life·of·the·product.·A·certified·product·that·follows·the·necessary·standards·and·government·certification·requirements·guarantees·that·known·software·vulnerabilities·will·be·remediated,·and·proper·guidance·for·protecting·and·securing·the·operating·system·will·be·given. |
| 1836 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·T\x8Th\x8he\x8e·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·O\x8Op\x8pe\x8er\x8ra\x8at\x8ti\x8in\x8ng\x8g·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·I\x8Is\x8s·V\x8Ve\x8en\x8nd\x8do\x8or\x8r·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8te\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1837 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·T\x8Th\x8he\x8e·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·O\x8Op\x8pe\x8er\x8ra\x8at\x8ti\x8in\x8ng\x8g·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·I\x8Is\x8s·V\x8Ve\x8en\x8nd\x8do\x8or\x8r·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8te\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1837 | The·installed·operating·system·must·be·maintained·by·a·vendor.·Oracle·Linux·is·supported·by·Oracle·Corporation.·As·the·Oracle·Linux·vendor,·Oracle·Corporation·is·responsible·for·providing·security·patches. | 1838 | The·installed·operating·system·must·be·maintained·by·a·vendor.·Oracle·Linux·is·supported·by·Oracle·Corporation.·As·the·Oracle·Linux·vendor,·Oracle·Corporation·is·responsible·for·providing·security·patches. |
| 1838 | Warning: ·There·is·no·remediation·besides·switching·to·a·different·operating·system. | 1839 | Warning: ·There·is·no·remediation·besides·switching·to·a·different·operating·system. |
| 1839 | Rationale:··An·operating·system·is·considered·"supported"·if·the·vendor·continues·to·provide·security·patches·for·the·product.·With·an·unsupported·release,·it·will·not·be·possible·to·resolve·any·security·issue·discovered·in·the·system·software. | 1840 | Rationale:··An·operating·system·is·considered·"supported"·if·the·vendor·continues·to·provide·security·patches·for·the·product.·With·an·unsupported·release,·it·will·not·be·possible·to·resolve·any·security·issue·discovered·in·the·system·software. |
| 1840 | Severity: ··high | 1841 | Severity: ··high |
| Offset 17625, 14 lines modified | Offset 17625, 26 lines modified | ||
| 17625 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 17625 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 17626 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 17626 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 17627 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 17627 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 17628 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 17628 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 17629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 17629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 17630 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 17630 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| Max diff block lines reached; 65151/72587 bytes (89.76%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e40:·3230·323 | 00037e40:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 17130, 203 lines modified | Offset 17130, 203 lines modified | ||
| 00042e90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00042e90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00042ea0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 00042ea0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 00042eb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00042eb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00042ec0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00042ec0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00042ed0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00042ed0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00042ee0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00042ee0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00042ef0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00042ef0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00042f00:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00042f00:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00042f10:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00042f20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00042f30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00042f40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00042f50:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 00042f10:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00042f20:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00042f30:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00042f40:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042f50:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 00042f60:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00042f70:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00042f80:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00042f90:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00042fa0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00042fb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00042fc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00042fd0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00042fe0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00042ff0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00043000:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00043010:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00043020:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00043030:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00043040:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00043050:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00043060:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00043070:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00043080:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00043090:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 000430a0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000430b0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000430c0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000430d0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000430e0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000430f0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00043100:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 00043110:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 00043120:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 00043130:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 00043140:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00043150:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 00043160:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 00043170:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 00043180:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 00043190:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 000431a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 000431b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 000431c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 000431d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 000431e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 000431f0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00043200:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00043210:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00043220:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00043230:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00043240:·7461·7267·6574·3d22·2369·646d·3536·3432··target="#idm5642 | |||
| 00043250:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00043260:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00043270:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00043280:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00043290:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 000432a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 000432b0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 000432c0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 000432d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000432e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000432f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00043300:·3d22·6964·6d35·3634·3222·3e3c·7072·653e··="idm5642"><pre> | |||
| 00043310:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00043320:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 00043330:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 00043340:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00043350:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00043360:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00043370:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00043380:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00043390:·3d22·2369·646d·3536·3433·2220·7461·6269··="#idm5643"·tabi | |||
| 000433a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 000433b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 000433c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 000433d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 000433e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 000433f0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 00043400:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 00043410:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00043420:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00043430:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00043440:·646d·3536·3433·223e·3c74·6162·6c65·2063··dm5643"><table·c | |||
| 00043450:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00043460:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00043470:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00043480:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00043490:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000434a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000434b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 000434c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 000434d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000434e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000434f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00043500:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00043510:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00043520:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| Max diff block lines reached; 674311/702103 bytes (96.04%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:7 | 46 | ····*·cpe:/o:oracle:linux:7 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 574, 14 lines modified | Offset 574, 26 lines modified | ||
| 574 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 574 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 577 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 577 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 578 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 578 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 579 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 579 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 580 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 580 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | [[packages]] | ||
| 583 | name·=·"aide" | ||
| 584 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 590 | package·--add=aide | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 586 | -·name:·Ensure·aide·is·installed | 596 | -·name:·Ensure·aide·is·installed |
| 587 | ··package: | 597 | ··package: |
| Offset 596, 19 lines modified | Offset 608, 14 lines modified | ||
| 596 | ··-·PCI-DSSv4-11.5.2 | 608 | ··-·PCI-DSSv4-11.5.2 |
| 597 | ··-·enable_strategy | 609 | ··-·enable_strategy |
| 598 | ··-·low_complexity | 610 | ··-·low_complexity |
| 599 | ··-·low_disruption | 611 | ··-·low_disruption |
| 600 | ··-·medium_severity | 612 | ··-·medium_severity |
| 601 | ··-·no_reboot_needed | 613 | ··-·no_reboot_needed |
| 602 | ··-·package_aide_installed | 614 | ··-·package_aide_installed |
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 604 | [[packages]] | ||
| 605 | name·=·"aide" | ||
| 606 | version·=·"*" | ||
| 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 612 | #·Remediation·is·applicable·only·in·certain·platforms | 620 | #·Remediation·is·applicable·only·in·certain·platforms |
| 613 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 621 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 628, 21 lines modified | Offset 635, 14 lines modified | ||
| 628 | include·install_aide | 635 | include·install_aide |
| 629 | class·install_aide·{ | 636 | class·install_aide·{ |
| 630 | ··package·{·'aide': | 637 | ··package·{·'aide': |
| 631 | ····ensure·=>·'installed', | 638 | ····ensure·=>·'installed', |
| 632 | ··} | 639 | ··} |
| 633 | } | 640 | } |
| 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 639 | package·--add=aide | ||
| 640 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 641 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 641 | Run·the·following·command·to·generate·a·new·database: | 642 | Run·the·following·command·to·generate·a·new·database: |
| 642 | $·sudo·/usr/sbin/aide·--init | 643 | $·sudo·/usr/sbin/aide·--init |
| 643 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 644 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 644 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 645 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 645 | To·initiate·a·manual·check,·run·the·following·command: | 646 | To·initiate·a·manual·check,·run·the·following·command: |
| 646 | $·sudo·/usr/sbin/aide·--check | 647 | $·sudo·/usr/sbin/aide·--check |
| Offset 1339, 14 lines modified | Offset 1339, 17 lines modified | ||
| 1339 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1339 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1340 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1340 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1341 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1341 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1342 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1342 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 1343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 1344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 1344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 1345 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 1345 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 1346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1347 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 1346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 1349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 1348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1351 | -·name:·Gather·the·package·facts | 1353 | -·name:·Gather·the·package·facts |
| 1352 | ··package_facts: | 1354 | ··package_facts: |
| Offset 1830, 17 lines modified | Offset 1833, 14 lines modified | ||
| 1830 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 1833 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 1831 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 1834 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 1832 | fi | 1835 | fi |
| 1833 | else | 1836 | else |
| 1834 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1837 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1835 | fi | 1838 | fi |
| 1836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1837 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 1838 | Group ·Operating·System·Vendor·Support·and·Certification· Group·contains·1·rule | 1839 | Group ·Operating·System·Vendor·Support·and·Certification· Group·contains·1·rule |
| 1839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·assurance·of·a·vendor·to·provide·operating·system·support·and·maintenance·for·their·product·is·an·important·criterion·to·ensure·product·stability·and·security·over·the·life·of·the·product.·A·certified·product·that·follows·the·necessary·standards·and·government·certification·requirements·guarantees·that·known·software·vulnerabilities·will·be·remediated,·and·proper·guidance·for·protecting·and·securing·the·operating·system·will·be·given. | 1840 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·assurance·of·a·vendor·to·provide·operating·system·support·and·maintenance·for·their·product·is·an·important·criterion·to·ensure·product·stability·and·security·over·the·life·of·the·product.·A·certified·product·that·follows·the·necessary·standards·and·government·certification·requirements·guarantees·that·known·software·vulnerabilities·will·be·remediated,·and·proper·guidance·for·protecting·and·securing·the·operating·system·will·be·given. |
| 1840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·T\x8Th\x8he\x8e·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·O\x8Op\x8pe\x8er\x8ra\x8at\x8ti\x8in\x8ng\x8g·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·I\x8Is\x8s·V\x8Ve\x8en\x8nd\x8do\x8or\x8r·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8te\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1841 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·T\x8Th\x8he\x8e·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·O\x8Op\x8pe\x8er\x8ra\x8at\x8ti\x8in\x8ng\x8g·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·I\x8Is\x8s·V\x8Ve\x8en\x8nd\x8do\x8or\x8r·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8te\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1841 | The·installed·operating·system·must·be·maintained·by·a·vendor.·Oracle·Linux·is·supported·by·Oracle·Corporation.·As·the·Oracle·Linux·vendor,·Oracle·Corporation·is·responsible·for·providing·security·patches. | 1842 | The·installed·operating·system·must·be·maintained·by·a·vendor.·Oracle·Linux·is·supported·by·Oracle·Corporation.·As·the·Oracle·Linux·vendor,·Oracle·Corporation·is·responsible·for·providing·security·patches. |
| 1842 | Warning: ·There·is·no·remediation·besides·switching·to·a·different·operating·system. | 1843 | Warning: ·There·is·no·remediation·besides·switching·to·a·different·operating·system. |
| 1843 | Rationale:··An·operating·system·is·considered·"supported"·if·the·vendor·continues·to·provide·security·patches·for·the·product.·With·an·unsupported·release,·it·will·not·be·possible·to·resolve·any·security·issue·discovered·in·the·system·software. | 1844 | Rationale:··An·operating·system·is·considered·"supported"·if·the·vendor·continues·to·provide·security·patches·for·the·product.·With·an·unsupported·release,·it·will·not·be·possible·to·resolve·any·security·issue·discovered·in·the·system·software. |
| 1844 | Severity: ··high | 1845 | Severity: ··high |
| Offset 17629, 14 lines modified | Offset 17629, 26 lines modified | ||
| 17629 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 17629 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 17630 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 17630 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 17631 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 17631 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 17632 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 17632 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 17633 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 | 17633 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000029-GPOS-00010 |
| 17634 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 | 17634 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010090 |
| Max diff block lines reached; 62391/69840 bytes (89.33%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e40:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e50:·2d31·3 | 00037e50:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15054, 202 lines modified | Offset 15054, 202 lines modified | ||
| 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | ||
| 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ad40:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ad50:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ad60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ad70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ad80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ad90:·2269·646d·3536·3834·223e·3c70·7265·3e3c··"idm5684"><pre>< | |||
| 0003ada0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003adb0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003adc0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003ad40:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ad50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ad60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ad70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ad80:·6522·2069·643d·2269·646d·3536·3834·223e··e"·id="idm5684"> | |||
| 0003ad90:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ada0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003adb0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003adc0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003add0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ade0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003adf0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ae00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ae10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae20:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ae30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ae40:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ae50:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ae60:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ae70:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ae80:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ae90:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003aea0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003aeb0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003aec0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003aed0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003aee0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003aef0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003af00:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003af10:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003af20:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003af30:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003af40:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003af50:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003af60:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003af70:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af80:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af90:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003afa0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003afb0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003afc0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003afd0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003afe0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003aff0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b000:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b010:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b020:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b030:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b040:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b050:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b060:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b070:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b080:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003b090:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b0a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b0b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b0c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b0d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b0e0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b0f0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b100:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b110:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b120:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b130:·6522·2069·643d·2269·646d·3536·3835·223e··e"·id="idm5685"> | |||
| 0003b140:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b150:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b160:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b170:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b180:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b190:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1a0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b1b0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b1c0:·6172·6765·743d·2223·6964·6d35·3638·3622··arget="#idm5686" | |||
| 0003b1d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b1e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b1f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b200:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b210:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b220:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b230:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b240:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b250:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b260:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b270:·6964·3d22·6964·6d35·3638·3622·3e3c·7461··id="idm5686"><ta | |||
| 0003b280:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b290:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b2a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b2b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b2c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b2d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b2e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b300:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b310:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| Max diff block lines reached; 1485224/1513016 bytes (98.16%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 14 lines modified | Offset 115, 26 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 128 | ··package: | 138 | ··package: |
| Offset 137, 19 lines modified | Offset 149, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 151 | ··-·low_complexity |
| 140 | ··-·low_disruption | 152 | ··-·low_disruption |
| 141 | ··-·medium_severity | 153 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 176, 14 lines modified | ||
| 169 | include·install_aide | 176 | include·install_aide |
| 170 | class·install_aide·{ | 177 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 178 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 179 | ····ensure·=>·'installed', |
| 173 | ··} | 180 | ··} |
| 174 | } | 181 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=aide | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 534, 14 lines modified | Offset 534, 21 lines modified | ||
| 534 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 534 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 535 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 535 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 536 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 536 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 537 | ············/tmp·directory·is·wiped·during·reboot. | 537 | ············/tmp·directory·is·wiped·during·reboot. |
| 538 | Severity: ··low | 538 | Severity: ··low |
| 539 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 539 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 540 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 540 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 542 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 543 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 544 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 545 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 546 | services·--enabled=tmp.mount | ||
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 547 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 542 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 548 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 543 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 549 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 544 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 550 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 545 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 551 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 546 | -·name:·Enable·mount·tmp | 552 | -·name:·Enable·mount·tmp |
| 547 | ··ansible.builtin.systemd: | 553 | ··ansible.builtin.systemd: |
| Offset 569, 21 lines modified | Offset 576, 14 lines modified | ||
| 569 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 576 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 570 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 577 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 571 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 578 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 572 | else | 579 | else |
| 573 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 580 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 574 | fi | 581 | fi |
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 580 | services·--enabled=tmp.mount | ||
| 581 | Group ·Sudo· Group·contains·18·rules | 582 | Group ·Sudo· Group·contains·18·rules |
| 582 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 583 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 583 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 584 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 584 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 585 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 585 | execute. | 586 | execute. |
| Max diff block lines reached; 91261/97291 bytes (93.80%) of diff not shown. | |||
| Offset 14301, 16 lines modified | Offset 14301, 16 lines modified | ||
| 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e40:·2d31·3 | 00037e40:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15059, 202 lines modified | Offset 15059, 202 lines modified | ||
| 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | ||
| 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | ||
| 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ad90:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003ada0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003adb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003adc0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003add0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ade0:·6964·3d22·6964·6d35·3638·3422·3e3c·7072··id="idm5684"><pr | |||
| 0003adf0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003ae00:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ae10:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ad90:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ada0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003adb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003adc0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003add0:·6170·7365·2220·6964·3d22·6964·6d35·3638··apse"·id="idm568 | |||
| 0003ade0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003adf0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ae40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ae50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ae60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ae70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ae80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ae90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003aea0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003aeb0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003aec0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003aed0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003aee0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003aef0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003af00:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003af10:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003af20:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003af30:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003af40:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003af50:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003af60:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003af70:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003af80:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003af90:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003afa0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003afb0:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003afc0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003afd0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003afe0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003aff0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b000:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b010:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b020:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b030:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b040:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b050:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b060:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b070:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b080:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b090:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b0a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b0d0:·2369·646d·3536·3835·2220·7461·6269·6e64··#idm5685"·tabind | |||
| 0003b0e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b0f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b100:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b110:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b120:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b130:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b140:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b150:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b160:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b170:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b180:·6170·7365·2220·6964·3d22·6964·6d35·3638··apse"·id="idm568 | |||
| 0003b190:·3522·3e3c·7072·653e·3c63·6f64·653e·0a5b··5"><pre><code>.[ | |||
| 0003b1a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b1b0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b1c0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b1d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b1e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b1f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b200:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b210:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b220:·3836·2220·7461·6269·6e64·6578·3d22·3022··86"·tabindex="0" | |||
| 0003b230:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b240:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b250:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b260:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b270:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b280:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b290:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b2a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b2c0:·6522·2069·643d·2269·646d·3536·3836·223e··e"·id="idm5686"> | |||
| 0003b2d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b300:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b310:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b320:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b330:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b340:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b350:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b360:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| Max diff block lines reached; 1564252/1592044 bytes (98.25%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 116, 14 lines modified | Offset 116, 26 lines modified | ||
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 139 | ··package: |
| Offset 138, 19 lines modified | Offset 150, 14 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 152 | ··-·low_complexity |
| 141 | ··-·low_disruption | 153 | ··-·low_disruption |
| 142 | ··-·medium_severity | 154 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 170, 21 lines modified | Offset 177, 14 lines modified | ||
| 170 | include·install_aide | 177 | include·install_aide |
| 171 | class·install_aide·{ | 178 | class·install_aide·{ |
| 172 | ··package·{·'aide': | 179 | ··package·{·'aide': |
| 173 | ····ensure·=>·'installed', | 180 | ····ensure·=>·'installed', |
| 174 | ··} | 181 | ··} |
| 175 | } | 182 | } |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=aide | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 184 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/sbin/aide·--init | 185 | $·sudo·/usr/sbin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 187 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 188 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 189 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 1059, 14 lines modified | Offset 1059, 21 lines modified | ||
| 1059 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 1059 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 1060 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 1060 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 1061 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 1061 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 1062 | ············/tmp·directory·is·wiped·during·reboot. | 1062 | ············/tmp·directory·is·wiped·during·reboot. |
| 1063 | Severity: ··low | 1063 | Severity: ··low |
| 1064 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 1064 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 1065 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 1065 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 1066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1071 | services·--enabled=tmp.mount | ||
| 1066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1072 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1073 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1074 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1075 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1076 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1071 | -·name:·Enable·mount·tmp | 1077 | -·name:·Enable·mount·tmp |
| 1072 | ··ansible.builtin.systemd: | 1078 | ··ansible.builtin.systemd: |
| Offset 1094, 21 lines modified | Offset 1101, 14 lines modified | ||
| 1094 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 1101 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 1095 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 1102 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 1096 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 1103 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 1097 | else | 1104 | else |
| 1098 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1105 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1099 | fi | 1106 | fi |
| 1100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1105 | services·--enabled=tmp.mount | ||
| 1106 | Group ·Sudo· Group·contains·18·rules | 1107 | Group ·Sudo· Group·contains·18·rules |
| 1107 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 1108 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 1108 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 1109 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 1109 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 1110 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 1110 | execute. | 1111 | execute. |
| Max diff block lines reached; 96901/102939 bytes (94.13%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e50:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e60:·2d31·3 | 00037e60:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15045, 202 lines modified | Offset 15045, 202 lines modified | ||
| 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | ||
| 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003acb0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003acc0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003acd0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ace0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003acf0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad00:·3d22·6964·6d35·3638·3422·3e3c·7072·653e··="idm5684"><pre> | |||
| 0003ad10:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ad20:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ad30:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003acb0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003acc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003acd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ace0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003acf0:·7365·2220·6964·3d22·6964·6d35·3638·3422··se"·id="idm5684" | |||
| 0003ad00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ad10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ad20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ad30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ad40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ad50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ad60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ad70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ad80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ad90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ada0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003adb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003adc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003add0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ade0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003adf0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003ae00:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ae10:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ae20:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ae30:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003ae40:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003ae50:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003ae60:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003ae70:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003ae80:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003ae90:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003aea0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003aeb0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003aec0:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | |||
| 0003aed0:·382d·3030·2d30·3130·3335·390a·2020·2d20··8-00-010359.··-· | |||
| 0003aee0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003aef0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003af00:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003af10:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003af20:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003af30:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003af40:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003af50:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003af60:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003af70:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003af80:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003af90:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003afa0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003afb0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003afc0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003afd0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003aff0:·646d·3536·3835·2220·7461·6269·6e64·6578··dm5685"·tabindex | |||
| 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b050:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b060:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b070:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b080:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b090:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0a0:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 0003b0b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b0c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b0d0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b0e0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b0f0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b100:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b110:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b120:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b130:·7461·7267·6574·3d22·2369·646d·3536·3836··target="#idm5686 | |||
| 0003b140:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b150:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b160:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b170:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b180:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b190:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1a0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b1b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b1c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b1d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b1e0:·2069·643d·2269·646d·3536·3836·223e·3c74···id="idm5686"><t | |||
| 0003b1f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b200:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b210:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b220:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b230:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b240:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b250:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b260:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b270:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b280:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| Max diff block lines reached; 1337398/1365190 bytes (97.96%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 26 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 135 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 136 | ··package: |
| Offset 135, 19 lines modified | Offset 147, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 149 | ··-·low_complexity |
| 138 | ··-·low_disruption | 150 | ··-·low_disruption |
| 139 | ··-·medium_severity | 151 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 174, 14 lines modified | ||
| 167 | include·install_aide | 174 | include·install_aide |
| 168 | class·install_aide·{ | 175 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 171 | ··} | 178 | ··} |
| 172 | } | 179 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 497, 14 lines modified | Offset 497, 21 lines modified | ||
| 497 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 497 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 498 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 498 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 499 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 499 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 500 | ············/tmp·directory·is·wiped·during·reboot. | 500 | ············/tmp·directory·is·wiped·during·reboot. |
| 501 | Severity: ··low | 501 | Severity: ··low |
| 502 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 502 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 503 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 503 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 509 | services·--enabled=tmp.mount | ||
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 509 | -·name:·Enable·mount·tmp | 515 | -·name:·Enable·mount·tmp |
| 510 | ··ansible.builtin.systemd: | 516 | ··ansible.builtin.systemd: |
| Offset 532, 21 lines modified | Offset 539, 14 lines modified | ||
| 532 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 539 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 533 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 540 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 534 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 541 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 535 | else | 542 | else |
| 536 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 543 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 537 | fi | 544 | fi |
| 538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 543 | services·--enabled=tmp.mount | ||
| 544 | Group ·Sudo· Group·contains·16·rules | 545 | Group ·Sudo· Group·contains·16·rules |
| 545 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 546 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 546 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 547 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 547 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 548 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 548 | execute. | 549 | execute. |
| Max diff block lines reached; 75738/81887 bytes (92.49%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2028·6173·206f·6620·3230·323 | 00037e40:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037e50:·3 | 00037e50:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 14718, 183 lines modified | Offset 14718, 183 lines modified | ||
| 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | ||
| 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039840:·6469·6174·696f·6e20·4 | 00039840:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039850:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039860:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039870:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039880:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00039890:·3035·3734·223e·3c74·6162·6c65·2063·6c61··0574"><table·cla | |||
| 000398a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000398b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000398c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000398d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000398e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000398f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039900:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039910:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00039920:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039930:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00039940:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039950:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039960:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039970:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039980:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039990:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 000399a0:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 000399b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 000399c0:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 000399d0:·2d61·7574·6f6d·6174·6963·0a20·2020·2073··-automatic.····s | |||
| 000399e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 000399f0:·7461·6773·3a0a·2020·2d20·656e·6162·6c65··tags:.··-·enable | |||
| 00039a00:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00039a10:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00039a20:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00039a30:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00039a40:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00039a50:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00039a60:·6b61·6765·5f64·6e66·2d61·7574·6f6d·6174··kage_dnf-automat | |||
| 00039a70:·6963·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ic_installed.</c | |||
| 00039a80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039a90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039aa0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039ab0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039ac0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039ad0:·6964·6d31·3035·3735·2220·7461·6269·6e64··idm10575"·tabind | |||
| 00039ae0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039af0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039b00:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039b10:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039b20:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039b30:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 00039 | 00039850:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 00039 | 00039860:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 00039 | 00039870:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00039 | 00039880:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00039 | 00039890:·2220·6964·3d22·6964·6d31·3035·3734·223e··"·id="idm10574"> | ||
| 00039 | 000398a0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 00039 | 000398b0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | ||
| 00039 | 000398c0:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | ||
| 00039 | 000398d0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | ||
| 00039 | 000398e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 00039 | 000398f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 00039 | 00039900:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 00039 | 00039910:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 00039 | 00039920:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00039 | 00039930:·2369·646d·3130·3537·3522·2074·6162·696e··#idm10575"·tabin | ||
| 00039 | 00039940:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00039 | 00039950:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00039 | 00039960:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00039 | 00039970:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00039 | 00039980:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00039 | 00039990:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | ||
| 00039 | 000399a0:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | ||
| 00039 | 000399b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 00039 | 000399c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 00039 | 000399d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 00039 | 000399e0:·3d22·6964·6d31·3035·3735·223e·3c74·6162··="idm10575"><tab | ||
| 00039 | 000399f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 00039 | 00039a00:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 00039 | 00039a10:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 00039 | 00039a20:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 00039 | 00039a30:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 00039 | 00039a40:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00039 | 00039a50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 00039 | 00039a60:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 00039 | 00039a70:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00039 | 00039a80:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 00039 | 00039a90:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 00039 | 00039aa0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 00039 | 00039ab0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 00039 | 00039ac0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 00039 | 00039ad0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 00039ae0:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 00039af0:·6464·3d64·6e66·2d61·7574·6f6d·6174·6963··dd=dnf-automatic | |||
| 00039b00:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039b10:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039b20:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039b30:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039dd0:·6f64·653e·0a69·6620·2120·7270·6d20·2d71··ode>.if·!·rpm·-q | |||
| 00039de0:·202d·2d71·7569·6574·2022·646e·662d·6175···--quiet·"dnf-au | |||
| 00039df0:·746f·6d61·7469·6322·203b·2074·6865·6e0a··tomatic"·;·then. | |||
| 00039e00:·2020·2020·7975·6d20·696e·7374·616c·6c20······yum·install· | |||
| 00039e10:·2d79·2022·646e·662d·6175·746f·6d61·7469··-y·"dnf-automati | |||
| 00039e20:·6322·0a66·690a·3c2f·636f·6465·3e3c·2f70··c".fi.</code></p | |||
| 00039e30:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00039e40:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| Max diff block lines reached; 309346/334516 bytes (92.48%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 14 lines modified | Offset 80, 26 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"dnf-automatic" | ||
| 90 | version·=·"*" | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | package·--add=dnf-automatic | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | -·name:·Ensure·dnf-automatic·is·installed | 102 | -·name:·Ensure·dnf-automatic·is·installed |
| 93 | ··package: | 103 | ··package: |
| Offset 96, 19 lines modified | Offset 108, 14 lines modified | ||
| 96 | ··tags: | 108 | ··tags: |
| 97 | ··-·enable_strategy | 109 | ··-·enable_strategy |
| 98 | ··-·low_complexity | 110 | ··-·low_complexity |
| 99 | ··-·low_disruption | 111 | ··-·low_disruption |
| 100 | ··-·medium_severity | 112 | ··-·medium_severity |
| 101 | ··-·no_reboot_needed | 113 | ··-·no_reboot_needed |
| 102 | ··-·package_dnf-automatic_installed | 114 | ··-·package_dnf-automatic_installed |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | [[packages]] | ||
| 105 | name·=·"dnf-automatic" | ||
| 106 | version·=·"*" | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 120 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 122, 21 lines modified | Offset 129, 14 lines modified | ||
| 122 | include·install_dnf-automatic | 129 | include·install_dnf-automatic |
| 123 | class·install_dnf-automatic·{ | 130 | class·install_dnf-automatic·{ |
| 124 | ··package·{·'dnf-automatic': | 131 | ··package·{·'dnf-automatic': |
| 125 | ····ensure·=>·'installed', | 132 | ····ensure·=>·'installed', |
| 126 | ··} | 133 | ··} |
| 127 | } | 134 | } |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=dnf-automatic | ||
| 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 135 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 136 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 137 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 137 | automatic.conf. | 138 | automatic.conf. |
| 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 139 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 140 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 141 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 11143, 14 lines modified | Offset 11143, 21 lines modified | ||
| 11143 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 11143 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 11144 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 11144 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 11145 | ···························A.9.1.2 | 11145 | ···························A.9.1.2 |
| 11146 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 11146 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 11147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 11147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 11148 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 11148 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 11149 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 11149 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 11150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 11152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 11153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 11154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 11155 | package·--remove=dhcp | ||
| 11150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 11156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 11151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 11157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 11152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 11158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 11153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 11159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 11154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 11160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 11155 | -·name:·Ensure·dhcp·is·removed | 11161 | -·name:·Ensure·dhcp·is·removed |
| 11156 | ··package: | 11162 | ··package: |
| Offset 11192, 21 lines modified | Offset 11199, 14 lines modified | ||
| 11192 | include·remove_dhcp | 11199 | include·remove_dhcp |
| 11193 | class·remove_dhcp·{ | 11200 | class·remove_dhcp·{ |
| 11194 | ··package·{·'dhcp': | 11201 | ··package·{·'dhcp': |
| 11195 | ····ensure·=>·'purged', | 11202 | ····ensure·=>·'purged', |
| 11196 | ··} | 11203 | ··} |
| 11197 | } | 11204 | } |
| 11198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 11200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 11201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 11202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 11203 | package·--remove=dhcp | ||
| 11204 | Group ·Mail·Server·Software· Group·contains·1·rule | 11205 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 11205 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 11206 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 11206 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 11207 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 11207 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 11208 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 11208 | possible. | 11209 | possible. |
| Max diff block lines reached; 23213/29011 bytes (80.01%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16386, 203 lines modified | Offset 16386, 203 lines modified | ||
| 00040010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00040010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00040020:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 00040020:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 00040030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00040030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00040040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00040040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00040050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00040050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00040060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00040060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00040070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00040070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00040080:·3e52·656d·6564·6961·7469·6f6e·204 | 00040080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00040090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 000400a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 000400b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000400c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000400d0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 00040090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 000400a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000400b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000400c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000400d0:·2269·646d·3536·3834·223e·3c74·6162·6c65··"idm5684"><table | |||
| 000400e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000400f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00040190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 000401a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 000401b0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 000401c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 000401d0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 000401e0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 000401f0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 00040200:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 00040210:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 00040220:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 00040230:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00040240:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00040250:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00040260:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00040270:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00040280:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 00040290:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 000402a0:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 000402b0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 000402c0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 000402d0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 000402e0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 000402f0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 00040300:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 00040310:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 00040320:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 00040330:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00040340:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00040350:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00040360:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 00040370:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 00040380:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040390:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 000403a0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 000403b0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 000403c0:·6172·6765·743d·2223·6964·6d35·3638·3522··arget="#idm5685" | |||
| 000403d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000403e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000403f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00040400:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00040410:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00040420:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040430:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 00040440:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 00040450:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00040460:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00040470:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00040480:·2269·646d·3536·3835·223e·3c70·7265·3e3c··"idm5685"><pre>< | |||
| 00040490:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 000404a0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 000404b0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 000404c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 000404d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 000404e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 000404f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00040500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00040510:·2223·6964·6d35·3638·3622·2074·6162·696e··"#idm5686"·tabin | |||
| 00040520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00040530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00040540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00040550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00040560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00040570:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 00040580:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00040590:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000405a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000405b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000405c0:·6d35·3638·3622·3e3c·7461·626c·6520·636c··m5686"><table·cl | |||
| 000405d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000405e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000405f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00040600:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00040610:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00040620:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040630:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00040640:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00040650:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00040660:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00040670:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00040680:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00040690:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000406a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| Max diff block lines reached; 159851/187643 bytes (85.19%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 410, 14 lines modified | Offset 410, 26 lines modified | ||
| 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 413 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 413 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 416 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 416 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 418 | [[packages]] | ||
| 419 | name·=·"aide" | ||
| 420 | version·=·"*" | ||
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 426 | package·--add=aide | ||
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 428 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 429 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 430 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 431 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 422 | -·name:·Ensure·aide·is·installed | 432 | -·name:·Ensure·aide·is·installed |
| 423 | ··package: | 433 | ··package: |
| Offset 432, 19 lines modified | Offset 444, 14 lines modified | ||
| 432 | ··-·PCI-DSSv4-11.5.2 | 444 | ··-·PCI-DSSv4-11.5.2 |
| 433 | ··-·enable_strategy | 445 | ··-·enable_strategy |
| 434 | ··-·low_complexity | 446 | ··-·low_complexity |
| 435 | ··-·low_disruption | 447 | ··-·low_disruption |
| 436 | ··-·medium_severity | 448 | ··-·medium_severity |
| 437 | ··-·no_reboot_needed | 449 | ··-·no_reboot_needed |
| 438 | ··-·package_aide_installed | 450 | ··-·package_aide_installed |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 440 | [[packages]] | ||
| 441 | name·=·"aide" | ||
| 442 | version·=·"*" | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 448 | #·Remediation·is·applicable·only·in·certain·platforms | 456 | #·Remediation·is·applicable·only·in·certain·platforms |
| 449 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 457 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 464, 21 lines modified | Offset 471, 14 lines modified | ||
| 464 | include·install_aide | 471 | include·install_aide |
| 465 | class·install_aide·{ | 472 | class·install_aide·{ |
| 466 | ··package·{·'aide': | 473 | ··package·{·'aide': |
| 467 | ····ensure·=>·'installed', | 474 | ····ensure·=>·'installed', |
| 468 | ··} | 475 | ··} |
| 469 | } | 476 | } |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 475 | package·--add=aide | ||
| 476 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 477 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 477 | Run·the·following·command·to·generate·a·new·database: | 478 | Run·the·following·command·to·generate·a·new·database: |
| 478 | $·sudo·/usr/sbin/aide·--init | 479 | $·sudo·/usr/sbin/aide·--init |
| 479 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 480 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 480 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 481 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 481 | To·initiate·a·manual·check,·run·the·following·command: | 482 | To·initiate·a·manual·check,·run·the·following·command: |
| 482 | $·sudo·/usr/sbin/aide·--check | 483 | $·sudo·/usr/sbin/aide·--check |
| Offset 5685, 38 lines modified | Offset 5685, 14 lines modified | ||
| 5685 | ··-·PCI-DSSv4-8.3.1 | 5685 | ··-·PCI-DSSv4-8.3.1 |
| 5686 | ··-·configure_strategy | 5686 | ··-·configure_strategy |
| 5687 | ··-·high_severity | 5687 | ··-·high_severity |
| 5688 | ··-·low_complexity | 5688 | ··-·low_complexity |
| 5689 | ··-·medium_disruption | 5689 | ··-·medium_disruption |
| 5690 | ··-·no_empty_passwords | 5690 | ··-·no_empty_passwords |
| 5691 | ··-·no_reboot_needed | 5691 | ··-·no_reboot_needed |
| 5692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5693 | --- | ||
| 5694 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 5695 | kind:·MachineConfig | ||
| 5696 | spec: | ||
| 5697 | ··config: | ||
| 5698 | ····ignition: | ||
| 5699 | ······version:·3.1.0 | ||
| 5700 | ····storage: | ||
| 5701 | ······files: | ||
| 5702 | ······-·contents: | ||
| 5703 | ··········source: | ||
| 5704 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 5705 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 5706 | ········mode:·0644 | ||
| 5707 | ········path:·/etc/pam.d/password-auth | ||
| 5708 | ········overwrite:·true | ||
| 5709 | ······-·contents: | ||
| 5710 | ··········source: | ||
| 5711 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 5712 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 5713 | ········mode:·0644 | ||
| 5714 | ········path:·/etc/pam.d/system-auth | ||
| 5715 | ········overwrite:·true | ||
| 5716 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 5692 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 5717 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5693 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5718 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 5694 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 5719 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5695 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5720 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 5696 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 5721 | #·Remediation·is·applicable·only·in·certain·platforms | 5697 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5722 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 5698 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 5751, 14 lines modified | Offset 5727, 38 lines modified | ||
| 5751 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 5727 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 5752 | fi | 5728 | fi |
| 5753 | fi | 5729 | fi |
| Max diff block lines reached; 17231/30787 bytes (55.97%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15098, 203 lines modified | Offset 15098, 203 lines modified | ||
| 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b010:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b020:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b030:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b040:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b050:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b010:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b020:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b030:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b040:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b050:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003b060:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b070:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b080:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b090:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b0a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b0b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b100:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b120:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b130:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b140:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b150:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b160:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b170:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b180:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b190:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b1a0:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b1b0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b1c0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b1d0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b1e0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b1f0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b200:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b210:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b220:·5341·2d53·5449·472d·4f4c·3038·2d30·302d··SA-STIG-OL08-00- | |||
| 0003b230:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003b240:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b250:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b260:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b270:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b280:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b290:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b2a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b2b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b2c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b2d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b2e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b2f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b300:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b310:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b320:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b330:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b340:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| 0003b350:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003b360:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b370:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b380:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b390:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b3c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b3d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b3e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b3f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b400:·643d·2269·646d·3536·3835·223e·3c70·7265··d="idm5685"><pre | |||
| 0003b410:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b420:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b430:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b440:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b450:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b460:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b470:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b480:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b490:·743d·2223·6964·6d35·3638·3622·2074·6162··t="#idm5686"·tab | |||
| 0003b4a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b4b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b4c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b4d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b4e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b4f0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b500:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d35·3638·3622·3e3c·7461·626c·6520··idm5686"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b600:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b610:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b620:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| Max diff block lines reached; 2371704/2399496 bytes (98.84%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:8 | 54 | ····*·cpe:/o:oracle:linux:8 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 26 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·--add=aide | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 121 | ··package: | 131 | ··package: |
| Offset 130, 19 lines modified | Offset 142, 14 lines modified | ||
| 130 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 131 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 132 | ··-·low_complexity | 144 | ··-·low_complexity |
| 133 | ··-·low_disruption | 145 | ··-·low_disruption |
| 134 | ··-·medium_severity | 146 | ··-·medium_severity |
| 135 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 136 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 21 lines modified | Offset 169, 14 lines modified | ||
| 162 | include·install_aide | 169 | include·install_aide |
| 163 | class·install_aide·{ | 170 | class·install_aide·{ |
| 164 | ··package·{·'aide': | 171 | ··package·{·'aide': |
| 165 | ····ensure·=>·'installed', | 172 | ····ensure·=>·'installed', |
| 166 | ··} | 173 | ··} |
| 167 | } | 174 | } |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 175 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 175 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 176 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 176 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 177 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 177 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 178 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 295, 14 lines modified | Offset 295, 18 lines modified | ||
| 295 | ············_\x8i_\x8s_\x8m······1446 | 295 | ············_\x8i_\x8s_\x8m······1446 |
| 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 297 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 297 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 298 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 298 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 300 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 300 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 301 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 301 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | [customizations] | ||
| 304 | fips·=·true | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 307 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 310 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 308 | ··set_fact: | 311 | ··set_fact: |
| Offset 402, 18 lines modified | Offset 406, 14 lines modified | ||
| 402 | ··-·NIST-800-53-SC-13 | 406 | ··-·NIST-800-53-SC-13 |
| 403 | ··-·enable_fips_mode | 407 | ··-·enable_fips_mode |
| 404 | ··-·high_severity | 408 | ··-·high_severity |
| 405 | ··-·medium_complexity | 409 | ··-·medium_complexity |
| 406 | ··-·medium_disruption | 410 | ··-·medium_disruption |
| 407 | ··-·reboot_required | 411 | ··-·reboot_required |
| 408 | ··-·restrict_strategy | 412 | ··-·restrict_strategy |
| 409 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 410 | [customizations] | ||
| 411 | fips·=·true | ||
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 413 | #·Remediation·is·applicable·only·in·certain·platforms | 414 | #·Remediation·is·applicable·only·in·certain·platforms |
| 414 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 415 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 415 | var_system_crypto_policy='FIPS:OSPP' | 416 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 451, 14 lines modified | Offset 451, 26 lines modified | ||
| 451 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 451 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 452 | $·sudo·yum·install·crypto-policies | 452 | $·sudo·yum·install·crypto-policies |
| 453 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 453 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 454 | Severity: ··medium | 454 | Severity: ··medium |
| Max diff block lines reached; 193595/200374 bytes (96.62%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e00:·2d3 | 00037e00:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19092, 274 lines modified | Offset 19092, 274 lines modified | ||
| 0004a930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004a930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004a940:·2369·646d·3130·3132·3422·2074·6162·696e··#idm10124"·tabin | 0004a940:·2369·646d·3130·3132·3422·2074·6162·696e··#idm10124"·tabin | ||
| 0004a950:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0004a950:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a960:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0004a960:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a970:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0004a970:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a980:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0004a980:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0004a990:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0004a990:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a9a0:·3e52·656d·6564·6961·7469·6f6e·204 | 0004a9a0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0004a9b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0004a9c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004a9 | 0004a9b0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0004a9c0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a9d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0004a9e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0004a9f0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 0004aa00:·3132·3422·3e3c·7072·653e·3c63·6f64·653e··124"><pre><code> | |||
| 0004aa10:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0004aa20:·6d65·203d·2022·7265·6172·220a·7665·7273··me·=·"rear".vers | |||
| 0004aa30:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0004aa40:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004aa50:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004aa60:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004a | 0004aa70:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0004aa80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004aa90:·3130·3132·3522·2074·6162·696e·6465·783d··10125"·tabindex= | |||
| 0004aaa0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004aab0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004aac0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004aad0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004aae0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004aaf0:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 0004ab00:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 0004ab10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004ab20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004a9f0:·2269·646d·3130·3132·3422·3e3c·7461·626c··"idm10124"><tabl | |||
| 0004aa00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0004aa10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0004aa20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0004aa30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0004aa40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0004aa50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004aa60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0004aa70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004aa80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004aa90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0004aaa0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0004aab0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0004aac0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0004aad0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0004aae0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0004aaf0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0004ab00:·6520·7265·6172·2069·7320·696e·7374·616c··e·rear·is·instal | |||
| 0004ab10:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0004ab20:·2020·206e·616d·653a·2072·6561·720a·2020·····name:·rear.·· | |||
| 0004ab30:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0004ab40:·0a20·2077·6865·6e3a·206e·6f74·2028·2028··.··when:·not·(·( | |||
| 0004ab50:·2028·2061·6e73·6962·6c65·5f61·7263·6869···(·ansible_archi | |||
| 0004ab60:·7465·6374·7572·6520·3d3d·2022·6161·7263··tecture·==·"aarc | |||
| 0004ab70:·6836·3422·2061·6e64·2061·6e73·6962·6c65··h64"·and·ansible | |||
| 0004ab80:·5f64·6973·7472·6962·7574·696f·6e20·3d3d··_distribution·== | |||
| 0004ab90:·2027·4f72·6163·6c65·4c69·6e75·7827·0a20···'OracleLinux'.· | |||
| 0004aba0:·2020·2061·6e64·2061·6e73·6962·6c65·5f64·····and·ansible_d | |||
| 0004abb0:·6973·7472·6962·7574·696f·6e5f·7665·7273··istribution_vers | |||
| 0004abc0:·696f·6e20·6973·2076·6572·7369·6f6e·2827··ion·is·version(' | |||
| 0004abd0:·392e·3027·2c20·2726·6774·3b3d·2729·2029··9.0',·'>=')·) | |||
| 0004abe0:·206f·7220·2820·616e·7369·626c·655f·6172···or·(·ansible_ar | |||
| 0004abf0:·6368·6974·6563·7475·7265·0a20·2020·203d··chitecture.····= | |||
| 0004ac00:·3d20·2261·6172·6368·3634·2220·616e·6420··=·"aarch64"·and· | |||
| 0004ac10:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | |||
| 0004ac20:·7469·6f6e·203d·3d20·2752·6564·4861·7427··tion·==·'RedHat' | |||
| 0004ac30:·2061·6e64·2061·6e73·6962·6c65·5f64·6973···and·ansible_dis | |||
| 0004ac40:·7472·6962·7574·696f·6e5f·7665·7273·696f··tribution_versio | |||
| 0004ac50:·6e0a·2020·2020·6973·2076·6572·7369·6f6e··n.····is·version | |||
| 0004ac60:·2827·392e·3027·2c20·2726·6774·3b3d·2729··('9.0',·'>=') | |||
| 0004ac70:·2029·206f·7220·2820·616e·7369·626c·655f···)·or·(·ansible_ | |||
| 0004ac80:·6469·7374·7269·6275·7469·6f6e·203d·3d20··distribution·==· | |||
| 0004ac90:·2752·6564·4861·7427·2061·6e64·2061·6e73··'RedHat'·and·ans | |||
| 0004aca0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0004acb0:·6e5f·7665·7273·696f·6e0a·2020·2020·6973··n_version.····is | |||
| 0004acc0:·2076·6572·7369·6f6e·2827·382e·3427·2c20···version('8.4',· | |||
| 0004acd0:·2726·6c74·3b3d·2729·2061·6e64·2061·6e73··'<=')·and·ans | |||
| 0004ace0:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | |||
| 0004acf0:·6520·3d3d·2022·7333·3930·7822·2029·2029··e·==·"s390x"·)·) | |||
| 0004ad00:·2029·0a20·2074·6167·733a·0a20·202d·2065···).··tags:.··-·e | |||
| 0004ad10:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0004ad20:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0004ad30:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0004ad40:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0004ad50:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0004ad60:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0004ad70:·2d20·7061·636b·6167·655f·7265·6172·5f69··-·package_rear_i | |||
| 0004ad80:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0004ad90:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0004ada0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0004adb0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0004adc0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0004add0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0004ade0:·3031·3235·2220·7461·6269·6e64·6578·3d22··0125"·tabindex=" | |||
| 0004adf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0004ae00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0004ae10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0004ae20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0004ae30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0004ae40:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0004ae50:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0004ae60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004ae70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004ae80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004ae90:·2220·6964·3d22·6964·6d31·3031·3235·223e··"·id="idm10125"> | |||
| 0004aea0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| Max diff block lines reached; 629508/667236 bytes (94.35%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:8 | 45 | ····*·cpe:/o:oracle:linux:8 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 967, 14 lines modified | Offset 967, 26 lines modified | ||
| 967 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 967 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 968 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 968 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 969 | The·rear·package·can·be·installed·with·the·following·command: | 969 | The·rear·package·can·be·installed·with·the·following·command: |
| 970 | $·sudo·yum·install·rear | 970 | $·sudo·yum·install·rear |
| 971 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 971 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 972 | Severity: ·medium | 972 | Severity: ·medium |
| 973 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 973 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 974 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 975 | [[packages]] | ||
| 976 | name·=·"rear" | ||
| 977 | version·=·"*" | ||
| 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 979 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 980 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 981 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 982 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 983 | package·--add=rear | ||
| 974 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 984 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 975 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 985 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 976 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 986 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 977 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 987 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 978 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 988 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 979 | -·name:·Ensure·rear·is·installed | 989 | -·name:·Ensure·rear·is·installed |
| 980 | ··package: | 990 | ··package: |
| Offset 988, 19 lines modified | Offset 1000, 14 lines modified | ||
| 988 | ··tags: | 1000 | ··tags: |
| 989 | ··-·enable_strategy | 1001 | ··-·enable_strategy |
| 990 | ··-·low_complexity | 1002 | ··-·low_complexity |
| 991 | ··-·low_disruption | 1003 | ··-·low_disruption |
| 992 | ··-·medium_severity | 1004 | ··-·medium_severity |
| 993 | ··-·no_reboot_needed | 1005 | ··-·no_reboot_needed |
| 994 | ··-·package_rear_installed | 1006 | ··-·package_rear_installed |
| 995 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 996 | [[packages]] | ||
| 997 | name·=·"rear" | ||
| 998 | version·=·"*" | ||
| 999 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1007 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1000 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1008 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1001 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1009 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1002 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1010 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1003 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1011 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1004 | #·Remediation·is·applicable·only·in·certain·platforms | 1012 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1005 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 1013 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1020, 21 lines modified | Offset 1027, 14 lines modified | ||
| 1020 | include·install_rear | 1027 | include·install_rear |
| 1021 | class·install_rear·{ | 1028 | class·install_rear·{ |
| 1022 | ··package·{·'rear': | 1029 | ··package·{·'rear': |
| 1023 | ····ensure·=>·'installed', | 1030 | ····ensure·=>·'installed', |
| 1024 | ··} | 1031 | ··} |
| 1025 | } | 1032 | } |
| 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1031 | package·--add=rear | ||
| 1032 | Group ·Updating·Software· Group·contains·6·rules | 1033 | Group ·Updating·Software· Group·contains·6·rules |
| 1033 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 1034 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 1034 | Oracle·Linux·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 1035 | Oracle·Linux·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 1035 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1036 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1036 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | 1037 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. |
| Offset 1688, 38 lines modified | Offset 1688, 14 lines modified | ||
| 1688 | ··-·PCI-DSSv4-8.3.1 | 1688 | ··-·PCI-DSSv4-8.3.1 |
| 1689 | ··-·configure_strategy | 1689 | ··-·configure_strategy |
| 1690 | ··-·high_severity | 1690 | ··-·high_severity |
| 1691 | ··-·low_complexity | 1691 | ··-·low_complexity |
| 1692 | ··-·medium_disruption | 1692 | ··-·medium_disruption |
| 1693 | ··-·no_empty_passwords | 1693 | ··-·no_empty_passwords |
| 1694 | ··-·no_reboot_needed | 1694 | ··-·no_reboot_needed |
| 1695 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1696 | --- | ||
| 1697 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1698 | kind:·MachineConfig | ||
| 1699 | spec: | ||
| 1700 | ··config: | ||
| 1701 | ····ignition: | ||
| 1702 | ······version:·3.1.0 | ||
| 1703 | ····storage: | ||
| 1704 | ······files: | ||
| 1705 | ······-·contents: | ||
| 1706 | ··········source: | ||
| 1707 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1708 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1709 | ········mode:·0644 | ||
| 1710 | ········path:·/etc/pam.d/password-auth | ||
| 1711 | ········overwrite:·true | ||
| 1712 | ······-·contents: | ||
| 1713 | ··········source: | ||
| 1714 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1715 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1716 | ········mode:·0644 | ||
| 1717 | ········path:·/etc/pam.d/system-auth | ||
| 1718 | ········overwrite:·true | ||
| 1719 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1695 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1720 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1696 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1721 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1697 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1722 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1698 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1723 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1699 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1724 | #·Remediation·is·applicable·only·in·certain·platforms | 1700 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1725 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1701 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1754, 14 lines modified | Offset 1730, 38 lines modified | ||
| 1754 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1730 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1755 | fi | 1731 | fi |
| 1756 | fi | 1732 | fi |
| Max diff block lines reached; 60292/75108 bytes (80.27%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 21304, 202 lines modified | Offset 21304, 202 lines modified | ||
| 00053370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00053370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00053380:·3d22·2369·646d·3134·3038·3122·2074·6162··="#idm14081"·tab | 00053380:·3d22·2369·646d·3134·3038·3122·2074·6162··="#idm14081"·tab | ||
| 00053390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00053390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 000533a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 000533a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 000533b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 000533b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 000533c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 000533c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 000533d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 000533d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 000533e0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 000533e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 000533f0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00053400:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00053410:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00053420:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00053430:·643d·2269·646d·3134·3038·3122·3e3c·7461··d="idm14081"><ta | |||
| 00053440:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00053450:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00053460:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00053470:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00053480:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00053490:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 000534a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000534b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000534c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000534d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000534e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000534f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00053500:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00053510:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 00053 | 000533f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 00053400:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00053410:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00053420:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00053430:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00053440:·3134·3038·3122·3e3c·7072·653e·3c63·6f64··14081"><pre><cod | |||
| 00053450:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 00053460:·6e73·2e73·6572·7669·6365·735d·0a6d·6173··ns.services].mas | |||
| 00053470:·6b65·6420·3d20·5b22·6465·6275·672d·7368··ked·=·["debug-sh | |||
| 00053480:·656c·6c22·5d0a·3c2f·636f·6465·3e3c·2f70··ell"].</code></p | |||
| 00053490:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000534a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 000534b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 000534c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 000534d0:·7461·7267·6574·3d22·2369·646d·3134·3038··target="#idm1408 | |||
| 000534e0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 000534f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00053500:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00053510:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00053520:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00053530:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00053540:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00053550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00053560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00053570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00053580:·7073·6522·2069·643d·2269·646d·3134·3038··pse"·id="idm1408 | |||
| 00053590:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 000535a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000535b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000535c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 000535d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 000535e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 000535f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00053600:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00053610:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00053620:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00053630:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00053640:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00053650:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00053660:·2f74·683e·3c74·643e·6469·7361·626c·653c··/th><td>disable< | |||
| 00053670:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00053680:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00053690:·6d65·3a20·4469·7361·626c·6520·6465·6275··me:·Disable·debu | |||
| 000536a0:·672d·7368·656c·6c20·5379·7374·656d·4420··g-shell·SystemD· | |||
| 000536b0:·5365·7276·6963·6520·2d20·436f·6c6c·6563··Service·-·Collec | |||
| 000536c0:·7420·7379·7374·656d·6420·5365·7276·6963··t·systemd·Servic | |||
| 000536d0:·6573·2050·7265·7365·6e74·2069·6e0a·2020··es·Present·in.·· | |||
| 000536e0:·2020·7468·6520·5379·7374·656d·0a20·2061····the·System.··a | |||
| 000536f0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e63··nsible.builtin.c | |||
| 00053700:·6f6d·6d61·6e64·3a20·7379·7374·656d·6374··ommand:·systemct | |||
| 00053710:·6c20·2d71·206c·6973·742d·756e·6974·2d66··l·-q·list-unit-f | |||
| 00053720:·696c·6573·202d·2d74·7970·6520·7365·7276··iles·--type·serv | |||
| 00053730:·6963·650a·2020·7265·6769·7374·6572·3a20··ice.··register:· | |||
| 00053740:·7365·7276·6963·655f·6578·6973·7473·0a20··service_exists.· | |||
| 00053750:·2063·6861·6e67·6564·5f77·6865·6e3a·2066···changed_when:·f | |||
| 00053760:·616c·7365·0a20·2066·6169·6c65·645f·7768··alse.··failed_wh | |||
| 00053770:·656e·3a20·7365·7276·6963·655f·6578·6973··en:·service_exis | |||
| 00053780:·7473·2e72·6320·6e6f·7420·696e·205b·302c··ts.rc·not·in·[0, | |||
| 00053790:·2031·5d0a·2020·6368·6563·6b5f·6d6f·6465···1].··check_mode | |||
| 000537a0:·3a20·6661·6c73·650a·2020·7768·656e·3a20··:·false.··when:· | |||
| 000537b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000537c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000537d0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000537e0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000537f0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00053800:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00053810:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 00053820:·2d30·302d·3034·3031·3830·0a20·202d·204e··-00-040180.··-·N | |||
| 00053830:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 00053840:·350a·2020·2d20·4e49·5354·2d38·3030·2d35··5.··-·NIST-800-5 | |||
| 00053850:·332d·434d·2d36·0a20·202d·2064·6973·6162··3-CM-6.··-·disab | |||
| 00053860:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 00053870:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00053880:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00053890:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 000538a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 000538b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2073··oot_needed.··-·s | |||
| 000538c0:·6572·7669·6365·5f64·6562·7567·2d73·6865··ervice_debug-she | |||
| 000538d0:·6c6c·5f64·6973·6162·6c65·640a·0a2d·206e··ll_disabled..-·n | |||
| 000538e0:·616d·653a·2044·6973·6162·6c65·2064·6562··ame:·Disable·deb | |||
| 000538f0:·7567·2d73·6865·6c6c·2053·7973·7465·6d44··ug-shell·SystemD | |||
| 00053900:·2053·6572·7669·6365·202d·2045·6e73·7572···Service·-·Ensur | |||
| 00053910:·6520·6465·6275·672d·7368·656c·6c2e·7365··e·debug-shell.se | |||
| 00053920:·7276·6963·6520·6973·204d·6173·6b65·640a··rvice·is·Masked. | |||
| Max diff block lines reached; 519979/547633 bytes (94.95%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:8 | 50 | ····*·cpe:/o:oracle:linux:8 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1342, 14 lines modified | Offset 1342, 18 lines modified | ||
| 1342 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1342 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1343 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1343 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1344 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1344 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1345 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1345 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1346 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1346 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1347 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-040180 | 1347 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-040180 |
| 1348 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248872r991589_rule | 1348 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248872r991589_rule |
| 1349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1350 | [customizations.services] | ||
| 1351 | masked·=·["debug-shell"] | ||
| 1349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1354 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1357 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1355 | ····the·System | 1358 | ····the·System |
| Offset 1423, 18 lines modified | Offset 1427, 14 lines modified | ||
| 1423 | ··-·NIST-800-53-CM-6 | 1427 | ··-·NIST-800-53-CM-6 |
| 1424 | ··-·disable_strategy | 1428 | ··-·disable_strategy |
| 1425 | ··-·low_complexity | 1429 | ··-·low_complexity |
| 1426 | ··-·low_disruption | 1430 | ··-·low_disruption |
| 1427 | ··-·medium_severity | 1431 | ··-·medium_severity |
| 1428 | ··-·no_reboot_needed | 1432 | ··-·no_reboot_needed |
| 1429 | ··-·service_debug-shell_disabled | 1433 | ··-·service_debug-shell_disabled |
| 1430 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1431 | [customizations.services] | ||
| 1432 | masked·=·["debug-shell"] | ||
| 1433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1434 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1435 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1436 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1437 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1438 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1438 | #·Remediation·is·applicable·only·in·certain·platforms | 1439 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1439 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1440 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1994, 38 lines modified | Offset 1994, 14 lines modified | ||
| 1994 | ··-·PCI-DSSv4-8.3.1 | 1994 | ··-·PCI-DSSv4-8.3.1 |
| 1995 | ··-·configure_strategy | 1995 | ··-·configure_strategy |
| 1996 | ··-·high_severity | 1996 | ··-·high_severity |
| 1997 | ··-·low_complexity | 1997 | ··-·low_complexity |
| 1998 | ··-·medium_disruption | 1998 | ··-·medium_disruption |
| 1999 | ··-·no_empty_passwords | 1999 | ··-·no_empty_passwords |
| 2000 | ··-·no_reboot_needed | 2000 | ··-·no_reboot_needed |
| 2001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2002 | --- | ||
| 2003 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2004 | kind:·MachineConfig | ||
| 2005 | spec: | ||
| 2006 | ··config: | ||
| 2007 | ····ignition: | ||
| 2008 | ······version:·3.1.0 | ||
| 2009 | ····storage: | ||
| 2010 | ······files: | ||
| 2011 | ······-·contents: | ||
| 2012 | ··········source: | ||
| 2013 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2014 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2015 | ········mode:·0644 | ||
| 2016 | ········path:·/etc/pam.d/password-auth | ||
| 2017 | ········overwrite:·true | ||
| 2018 | ······-·contents: | ||
| 2019 | ··········source: | ||
| 2020 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2021 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2022 | ········mode:·0644 | ||
| 2023 | ········path:·/etc/pam.d/system-auth | ||
| 2024 | ········overwrite:·true | ||
| 2025 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2026 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2002 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2027 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2003 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2028 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2004 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2029 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 2005 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 2030 | #·Remediation·is·applicable·only·in·certain·platforms | 2006 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2031 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2007 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2060, 14 lines modified | Offset 2036, 38 lines modified | ||
| 2060 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 2036 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 2061 | fi | 2037 | fi |
| 2062 | fi | 2038 | fi |
| 2063 | else | 2039 | else |
| 2064 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2040 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2065 | fi | 2041 | fi |
| 2042 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2043 | --- | ||
| 2044 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2045 | kind:·MachineConfig | ||
| 2046 | spec: | ||
| 2047 | ··config: | ||
| 2048 | ····ignition: | ||
| 2049 | ······version:·3.1.0 | ||
| 2050 | ····storage: | ||
| 2051 | ······files: | ||
| 2052 | ······-·contents: | ||
| 2053 | ··········source: | ||
| 2054 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2055 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2056 | ········mode:·0644 | ||
| 2057 | ········path:·/etc/pam.d/password-auth | ||
| 2058 | ········overwrite:·true | ||
| 2059 | ······-·contents: | ||
| 2060 | ··········source: | ||
| 2061 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2062 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2063 | ········mode:·0644 | ||
| 2064 | ········path:·/etc/pam.d/system-auth | ||
| 2065 | ········overwrite:·true | ||
| 2066 | Group ·Restrict·Root·Logins· Group·contains·3·rules | 2066 | Group ·Restrict·Root·Logins· Group·contains·3·rules |
| 2067 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. | 2067 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. |
| 2068 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2068 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 38451/61570 bytes (62.45%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 203 lines modified | Offset 15073, 203 lines modified | ||
| 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ae80:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003ae90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003aea0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003aeb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003aec0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae80:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003ae90:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aea0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003aeb0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003aec0:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003aed0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003aee0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003aef0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003af00:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003af10:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003af20:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003af30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003af40:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003af50:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003af60:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003af70:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003af80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003af90:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003afa0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003afb0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003afc0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003afd0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003afe0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003aff0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b000:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b010:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b020:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b030:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b040:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b050:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b060:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b070:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b080:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b090:·5341·2d53·5449·472d·4f4c·3038·2d30·302d··SA-STIG-OL08-00- | |||
| 0003b0a0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003b0b0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b0c0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b0d0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b0e0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b0f0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b100:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b110:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b120:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b130:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b140:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b150:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b160:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b170:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b180:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b190:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b1a0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b1b0:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| 0003b1c0:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003b1d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b1e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b1f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b200:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b210:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b220:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b230:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b240:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b250:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b260:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b270:·643d·2269·646d·3536·3835·223e·3c70·7265··d="idm5685"><pre | |||
| 0003b280:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b290:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b2a0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b2b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b2c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b2d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b2e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b2f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b300:·743d·2223·6964·6d35·3638·3622·2074·6162··t="#idm5686"·tab | |||
| 0003b310:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b320:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b330:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b340:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b350:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b360:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b370:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b380:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b390:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b3a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b3b0:·6964·6d35·3638·3622·3e3c·7461·626c·6520··idm5686"><table· | |||
| 0003b3c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b3d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b3e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b3f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b400:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b410:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b420:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b430:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b440:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b450:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b460:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b470:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b480:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b490:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| Max diff block lines reached; 2371704/2399496 bytes (98.84%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 26 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=aide | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·aide·is·installed | 123 | -·name:·Ensure·aide·is·installed |
| 114 | ··package: | 124 | ··package: |
| Offset 123, 19 lines modified | Offset 135, 14 lines modified | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | 135 | ··-·PCI-DSSv4-11.5.2 |
| 124 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 125 | ··-·low_complexity | 137 | ··-·low_complexity |
| 126 | ··-·low_disruption | 138 | ··-·low_disruption |
| 127 | ··-·medium_severity | 139 | ··-·medium_severity |
| 128 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 129 | ··-·package_aide_installed | 141 | ··-·package_aide_installed |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 21 lines modified | Offset 162, 14 lines modified | ||
| 155 | include·install_aide | 162 | include·install_aide |
| 156 | class·install_aide·{ | 163 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 164 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 165 | ····ensure·=>·'installed', |
| 159 | ··} | 166 | ··} |
| 160 | } | 167 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·--add=aide | ||
| 167 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 168 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 168 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 169 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 169 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 170 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 170 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 171 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 288, 14 lines modified | Offset 288, 18 lines modified | ||
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 294 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 294 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 296 | [customizations] | ||
| 297 | fips·=·true | ||
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 296 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 297 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 298 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 299 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 300 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 303 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 301 | ··set_fact: | 304 | ··set_fact: |
| Offset 395, 18 lines modified | Offset 399, 14 lines modified | ||
| 395 | ··-·NIST-800-53-SC-13 | 399 | ··-·NIST-800-53-SC-13 |
| 396 | ··-·enable_fips_mode | 400 | ··-·enable_fips_mode |
| 397 | ··-·high_severity | 401 | ··-·high_severity |
| 398 | ··-·medium_complexity | 402 | ··-·medium_complexity |
| 399 | ··-·medium_disruption | 403 | ··-·medium_disruption |
| 400 | ··-·reboot_required | 404 | ··-·reboot_required |
| 401 | ··-·restrict_strategy | 405 | ··-·restrict_strategy |
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 403 | [customizations] | ||
| 404 | fips·=·true | ||
| 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 406 | #·Remediation·is·applicable·only·in·certain·platforms | 407 | #·Remediation·is·applicable·only·in·certain·platforms |
| 407 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 408 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 408 | var_system_crypto_policy='FIPS:OSPP' | 409 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 444, 14 lines modified | Offset 444, 26 lines modified | ||
| 444 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 444 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 445 | $·sudo·yum·install·crypto-policies | 445 | $·sudo·yum·install·crypto-policies |
| 446 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 446 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 447 | Severity: ··medium | 447 | Severity: ··medium |
| Max diff block lines reached; 193595/200421 bytes (96.59%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16398, 202 lines modified | Offset 16398, 202 lines modified | ||
| 000400d0:·7267·6574·3d22·2369·646d·3536·3834·2220··rget="#idm5684"· | 000400d0:·7267·6574·3d22·2369·646d·3536·3834·2220··rget="#idm5684"· | ||
| 000400e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 000400e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 000400f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 000400f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00040100:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00040100:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00040110:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00040110:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00040120:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00040120:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00040130:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00040130:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00040140:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00040150:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00040160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040190:·6964·6d35·3638·3422·3e3c·7072·653e·3c63··idm5684"><pre><c | |||
| 000401a0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 000401b0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 000401c0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 00040140:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00040150:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040160:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040170:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040180:·2220·6964·3d22·6964·6d35·3638·3422·3e3c··"·id="idm5684">< | |||
| 00040190:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 000401a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 000401b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 000401c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 000401d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 000401e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000401f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040200:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00040210:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040220:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00040230:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00040240:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040250:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00040260:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00040270:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00040280:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 00040290:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 000402a0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 000402b0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 000402c0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 000402d0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 000402e0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000402f0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00040300:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00040310:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 00040320:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 00040330:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 00040340:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 00040350:·2044·4953·412d·5354·4947·2d4f·4c30·382d···DISA-STIG-OL08- | |||
| 00040360:·3030·2d30·3130·3335·390a·2020·2d20·4e49··00-010359.··-·NI | |||
| 00040370:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 00040380:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 00040390:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 000403a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 000403b0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 000403c0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 000403d0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 000403e0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 000403f0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 00040400:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 00040410:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 00040420:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 00040430:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040440:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040450:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040460:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040470:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040480:·3536·3835·2220·7461·6269·6e64·6578·3d22··5685"·tabindex=" | |||
| 00040490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 000404a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 000404b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 000404c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 000404d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 000404e0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 000404f0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00040500:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040510:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040520:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040530:·2220·6964·3d22·6964·6d35·3638·3522·3e3c··"·id="idm5685">< | |||
| 00040540:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00040550:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00040560:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 00040570:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 00040580:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040590:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 000405a0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 000405b0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 000405c0:·7267·6574·3d22·2369·646d·3536·3836·2220··rget="#idm5686"· | |||
| 000405d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 000405e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 000405f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040600:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040610:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040620:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040630:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 00040640:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040650:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040660:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040670:·643d·2269·646d·3536·3836·223e·3c74·6162··d="idm5686"><tab | |||
| 00040680:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040690:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 000406a0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 000406b0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 000406c0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 000406d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000406e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 000406f0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00040700:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040710:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040720:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| Max diff block lines reached; 712566/740220 bytes (96.26%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 411, 14 lines modified | Offset 411, 26 lines modified | ||
| 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 414 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 414 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 415 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 415 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 416 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 416 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 417 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 417 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | [[packages]] | ||
| 420 | name·=·"aide" | ||
| 421 | version·=·"*" | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 427 | package·--add=aide | ||
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 423 | -·name:·Ensure·aide·is·installed | 433 | -·name:·Ensure·aide·is·installed |
| 424 | ··package: | 434 | ··package: |
| Offset 433, 19 lines modified | Offset 445, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 445 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·enable_strategy | 446 | ··-·enable_strategy |
| 435 | ··-·low_complexity | 447 | ··-·low_complexity |
| 436 | ··-·low_disruption | 448 | ··-·low_disruption |
| 437 | ··-·medium_severity | 449 | ··-·medium_severity |
| 438 | ··-·no_reboot_needed | 450 | ··-·no_reboot_needed |
| 439 | ··-·package_aide_installed | 451 | ··-·package_aide_installed |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | [[packages]] | ||
| 442 | name·=·"aide" | ||
| 443 | version·=·"*" | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 449 | #·Remediation·is·applicable·only·in·certain·platforms | 457 | #·Remediation·is·applicable·only·in·certain·platforms |
| 450 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 458 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 465, 21 lines modified | Offset 472, 14 lines modified | ||
| 465 | include·install_aide | 472 | include·install_aide |
| 466 | class·install_aide·{ | 473 | class·install_aide·{ |
| 467 | ··package·{·'aide': | 474 | ··package·{·'aide': |
| 468 | ····ensure·=>·'installed', | 475 | ····ensure·=>·'installed', |
| 469 | ··} | 476 | ··} |
| 470 | } | 477 | } |
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 476 | package·--add=aide | ||
| 477 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 478 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 478 | Run·the·following·command·to·generate·a·new·database: | 479 | Run·the·following·command·to·generate·a·new·database: |
| 479 | $·sudo·/usr/sbin/aide·--init | 480 | $·sudo·/usr/sbin/aide·--init |
| 480 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 481 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 481 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 482 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 482 | To·initiate·a·manual·check,·run·the·following·command: | 483 | To·initiate·a·manual·check,·run·the·following·command: |
| 483 | $·sudo·/usr/sbin/aide·--check | 484 | $·sudo·/usr/sbin/aide·--check |
| Offset 2513, 14 lines modified | Offset 2513, 26 lines modified | ||
| 2513 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 2513 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 2514 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2514 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2515 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2515 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2516 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2516 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2517 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2517 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2518 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2518 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2519 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2519 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2521 | [[packages]] | ||
| 2522 | name·=·"sudo" | ||
| 2523 | version·=·"*" | ||
| 2524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2529 | package·--add=sudo | ||
| 2520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2525 | -·name:·Ensure·sudo·is·installed | 2535 | -·name:·Ensure·sudo·is·installed |
| 2526 | ··package: | 2536 | ··package: |
| Offset 2532, 19 lines modified | Offset 2544, 14 lines modified | ||
| 2532 | ··-·PCI-DSSv4-2.2.6 | 2544 | ··-·PCI-DSSv4-2.2.6 |
| 2533 | ··-·enable_strategy | 2545 | ··-·enable_strategy |
| 2534 | ··-·low_complexity | 2546 | ··-·low_complexity |
| 2535 | ··-·low_disruption | 2547 | ··-·low_disruption |
| 2536 | ··-·medium_severity | 2548 | ··-·medium_severity |
| 2537 | ··-·no_reboot_needed | 2549 | ··-·no_reboot_needed |
| 2538 | ··-·package_sudo_installed | 2550 | ··-·package_sudo_installed |
| 2539 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2540 | [[packages]] | ||
| 2541 | name·=·"sudo" | ||
| 2542 | version·=·"*" | ||
| 2543 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2544 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2552 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2545 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2553 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 81088/86873 bytes (93.34%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d40:·2d31·3 | 00037d40:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 21549, 692 lines modified | Offset 21549, 692 lines modified | ||
| 000542c0:·612d·7461·7267·6574·3d22·2369·646d·3136··a-target="#idm16 | 000542c0:·612d·7461·7267·6574·3d22·2369·646d·3136··a-target="#idm16 | ||
| 000542d0:·3432·3022·2074·6162·696e·6465·783d·2230··420"·tabindex="0 | 000542d0:·3432·3022·2074·6162·696e·6465·783d·2230··420"·tabindex="0 | ||
| 000542e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 000542e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 000542f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 000542f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00054300:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00054300:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00054310:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00054310:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00054320:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00054320:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00054330:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 00054340:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 00054350:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00054360:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00054370:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00054380:·6d31·3634·3230·223e·3c70·7265·3e3c·636f··m16420"><pre><co | |||
| 00054390:·6465·3e2d·2d2d·0a61·7069·5665·7273·696f··de>---.apiVersio | |||
| 000543a0:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 000543b0:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| 000543c0:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | |||
| 000543d0:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | |||
| 000543e0:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | |||
| 000543f0:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | |||
| 00054400:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | |||
| 00054410:·2020·2073·746f·7261·6765·3a0a·2020·2020·····storage:.···· | |||
| 00054420:·2020·6669·6c65·733a·0a20·2020·2020·202d····files:.······- | |||
| 00054430:·2063·6f6e·7465·6e74·733a·0a20·2020·2020···contents:.····· | |||
| 00054440:·2020·2020·2073·6f75·7263·653a·2064·6174·······source:·dat | |||
| 00054450:·613a·2c25·3233·2532·3047·656e·6572·6174··a:,%23%20Generat | |||
| 00054460:·6564·2532·3062·7925·3230·6175·7468·7365··ed%20by%20authse | |||
| 00054470:·6c65·6374·2532·306f·6e25·3230·5361·7425··lect%20on%20Sat% | |||
| 00054480:·3230·4f63·7425·3230·3237·2532·3031·3425··20Oct%2027%2014% | |||
| 00054490:·3341·3539·2533·4133·3625·3230·3230·3138··3A59%3A36%202018 | |||
| 000544a0:·2530·4125·3233·2532·3044·6f25·3230·6e6f··%0A%23%20Do%20no | |||
| 000544b0:·7425·3230·6d6f·6469·6679·2532·3074·6869··t%20modify%20thi | |||
| 000544c0:·7325·3230·6669·6c65·2532·306d·616e·7561··s%20file%20manua | |||
| 000544d0:·6c6c·792e·2530·4125·3041·6175·7468·2532··lly.%0A%0Aauth%2 | |||
| 000544e0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 000544f0:·2532·3025·3230·7265·7175·6972·6564·2532··%20%20required%2 | |||
| 00054500:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054510:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054520:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054530:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054540:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054550:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054560:·3025·3230·2532·3025·3230·2532·3070·616d··0%20%20%20%20pam | |||
| 00054570:·5f65·6e76·2e73·6f25·3041·6175·7468·2532··_env.so%0Aauth%2 | |||
| 00054580:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054590:·2532·3025·3230·7265·7175·6972·6564·2532··%20%20required%2 | |||
| 000545a0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 000545b0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 000545c0:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 000545d0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 000545e0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 000545f0:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054600:·3025·3230·2532·3025·3230·2532·3070·616d··0%20%20%20%20pam | |||
| 00054610:·5f66·6169·6c64·656c·6179·2e73·6f25·3230··_faildelay.so%20 | |||
| 00054620:·6465·6c61·7925·3344·3230·3030·3030·3025··delay%3D2000000% | |||
| 00054630:·3041·6175·7468·2532·3025·3230·2532·3025··0Aauth%20%20%20% | |||
| 00054640:·3230·2532·3025·3230·2532·3025·3230·7375··20%20%20%20%20su | |||
| 00054650:·6666·6963·6965·6e74·2532·3025·3230·2532··fficient%20%20%2 | |||
| 00054660:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054670:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054680:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054690:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 000546a0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 000546b0:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 000546c0:·3070·616d·5f66·7072·696e·7464·2e73·6f25··0pam_fprintd.so% | |||
| 000546d0:·3041·6175·7468·2532·3025·3230·2532·3025··0Aauth%20%20%20% | |||
| 000546e0:·3230·2532·3025·3230·2532·3025·3230·2535··20%20%20%20%20%5 | |||
| 000546f0:·4264·6566·6175·6c74·2533·4431·2532·3069··Bdefault%3D1%20i | |||
| 00054700:·676e·6f72·6525·3344·6967·6e6f·7265·2532··gnore%3Dignore%2 | |||
| 00054710:·3073·7563·6365·7373·2533·446f·6b25·3544··0success%3Dok%5D | |||
| 00054720:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054730:·3230·2532·3025·3230·2532·3070·616d·5f73··20%20%20%20pam_s | |||
| 00054740:·7563·6365·6564·5f69·662e·736f·2532·3075··ucceed_if.so%20u | |||
| 00054750:·6964·2532·3025·3345·2533·4425·3230·3130··id%20%3E%3D%2010 | |||
| 00054760:·3030·2532·3071·7569·6574·2530·4161·7574··00%20quiet%0Aaut | |||
| 00054770:·6825·3230·2532·3025·3230·2532·3025·3230··h%20%20%20%20%20 | |||
| 00054780:·2532·3025·3230·2532·3025·3542·6465·6661··%20%20%20%5Bdefa | |||
| 00054790:·756c·7425·3344·3125·3230·6967·6e6f·7265··ult%3D1%20ignore | |||
| 000547a0:·2533·4469·676e·6f72·6525·3230·7375·6363··%3Dignore%20succ | |||
| 000547b0:·6573·7325·3344·6f6b·2535·4425·3230·2532··ess%3Dok%5D%20%2 | |||
| 000547c0:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 000547d0:·2532·3025·3230·7061·6d5f·6c6f·6361·6c75··%20%20pam_localu | |||
| 000547e0:·7365·722e·736f·2530·4161·7574·6825·3230··ser.so%0Aauth%20 | |||
| 000547f0:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054800:·3230·2532·3073·7566·6669·6369·656e·7425··20%20sufficient% | |||
| 00054810:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054820:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054830:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054840:·3230·2532·3025·3230·2532·3025·3230·2532··20%20%20%20%20%2 | |||
| 00054850:·3025·3230·2532·3025·3230·2532·3025·3230··0%20%20%20%20%20 | |||
| 00054860:·2532·3025·3230·2532·3025·3230·2532·3025··%20%20%20%20%20% | |||
| 00054870:·3230·2532·3025·3230·7061·6d5f·756e·6978··20%20%20pam_unix | |||
| 00054 | 00054330:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 00054340:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00054350:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00054360:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00054370:·7365·2220·6964·3d22·6964·6d31·3634·3230··se"·id="idm16420 | |||
| 00054380:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00054390:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000543a0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000543b0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 000543c0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000543d0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000543e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000543f0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00054400:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 00054410:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00054420:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00054430:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00054440:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| Max diff block lines reached; 293086/323638 bytes (90.56%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:8 | 42 | ····*·cpe:/o:oracle:linux:8 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1261, 38 lines modified | Offset 1261, 14 lines modified | ||
| 1261 | ··-·PCI-DSSv4-8.3.1 | 1261 | ··-·PCI-DSSv4-8.3.1 |
| 1262 | ··-·configure_strategy | 1262 | ··-·configure_strategy |
| 1263 | ··-·high_severity | 1263 | ··-·high_severity |
| 1264 | ··-·low_complexity | 1264 | ··-·low_complexity |
| 1265 | ··-·medium_disruption | 1265 | ··-·medium_disruption |
| 1266 | ··-·no_empty_passwords | 1266 | ··-·no_empty_passwords |
| 1267 | ··-·no_reboot_needed | 1267 | ··-·no_reboot_needed |
| 1268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1269 | --- | ||
| 1270 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1271 | kind:·MachineConfig | ||
| 1272 | spec: | ||
| 1273 | ··config: | ||
| 1274 | ····ignition: | ||
| 1275 | ······version:·3.1.0 | ||
| 1276 | ····storage: | ||
| 1277 | ······files: | ||
| 1278 | ······-·contents: | ||
| 1279 | ··········source: | ||
| 1280 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1281 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1282 | ········mode:·0644 | ||
| 1283 | ········path:·/etc/pam.d/password-auth | ||
| 1284 | ········overwrite:·true | ||
| 1285 | ······-·contents: | ||
| 1286 | ··········source: | ||
| 1287 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1288 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1289 | ········mode:·0644 | ||
| 1290 | ········path:·/etc/pam.d/system-auth | ||
| 1291 | ········overwrite:·true | ||
| 1292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1293 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1269 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1294 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1270 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1295 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1271 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1296 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1272 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1297 | #·Remediation·is·applicable·only·in·certain·platforms | 1273 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1298 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1274 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1327, 14 lines modified | Offset 1303, 38 lines modified | ||
| 1327 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1303 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1328 | fi | 1304 | fi |
| 1329 | fi | 1305 | fi |
| 1330 | else | 1306 | else |
| 1331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1307 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1332 | fi | 1308 | fi |
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1310 | --- | ||
| 1311 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1312 | kind:·MachineConfig | ||
| 1313 | spec: | ||
| 1314 | ··config: | ||
| 1315 | ····ignition: | ||
| 1316 | ······version:·3.1.0 | ||
| 1317 | ····storage: | ||
| 1318 | ······files: | ||
| 1319 | ······-·contents: | ||
| 1320 | ··········source: | ||
| 1321 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1322 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1323 | ········mode:·0644 | ||
| 1324 | ········path:·/etc/pam.d/password-auth | ||
| 1325 | ········overwrite:·true | ||
| 1326 | ······-·contents: | ||
| 1327 | ··········source: | ||
| 1328 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1329 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1330 | ········mode:·0644 | ||
| 1331 | ········path:·/etc/pam.d/system-auth | ||
| 1332 | ········overwrite:·true | ||
| 1333 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 1333 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 1334 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 1334 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 1335 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 1335 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 1336 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 1336 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 1337 | #·echo·$PATH | 1337 | #·echo·$PATH |
| 1338 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 1338 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1432, 14 lines modified | Offset 1432, 26 lines modified | ||
| 1432 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1432 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1435 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1435 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1437 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-030670 | 1437 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-030670 |
| 1438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248812r991589_rule | 1438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248812r991589_rule |
| 1439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1440 | [[packages]] | ||
| 1441 | name·=·"rsyslog" | ||
| 1442 | version·=·"*" | ||
| 1443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1448 | package·--add=rsyslog | ||
| 1439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1444 | -·name:·Ensure·rsyslog·is·installed | 1454 | -·name:·Ensure·rsyslog·is·installed |
| 1445 | ··package: | 1455 | ··package: |
| Offset 1451, 19 lines modified | Offset 1463, 14 lines modified | ||
| 1451 | ··-·NIST-800-53-CM-6(a) | 1463 | ··-·NIST-800-53-CM-6(a) |
| 1452 | ··-·enable_strategy | 1464 | ··-·enable_strategy |
| 1453 | ··-·low_complexity | 1465 | ··-·low_complexity |
| 1454 | ··-·low_disruption | 1466 | ··-·low_disruption |
| 1455 | ··-·medium_severity | 1467 | ··-·medium_severity |
| 1456 | ··-·no_reboot_needed | 1468 | ··-·no_reboot_needed |
| Max diff block lines reached; 19467/41009 bytes (47.47%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2020·2861·7320·6f66·2032·3032·3 | 00037cc0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037cd0:·2d3 | 00037cd0:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15076, 203 lines modified | Offset 15076, 203 lines modified | ||
| 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aea0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003aea0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003aeb0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003aec0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aed0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aee0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003aef0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003aeb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aec0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aed0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aee0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aef0:·2269·646d·3536·3834·223e·3c74·6162·6c65··"idm5684"><table | |||
| 0003af00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003af10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003af20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af70:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003af80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003af90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003afa0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003afb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003afc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003afd0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003afe0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003aff0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b000:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b010:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b020:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b030:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b040:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b050:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b060:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b070:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b080:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b090:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b0a0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0b0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b0c0:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 0003b0d0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003b0e0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b0f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b100:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b110:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b120:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b130:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b140:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b150:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b160:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b170:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b180:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b190:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b1a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b1b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b1d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b1e0:·6172·6765·743d·2223·6964·6d35·3638·3522··arget="#idm5685" | |||
| 0003b1f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b200:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b210:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b220:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b230:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b240:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b250:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b260:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b270:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b280:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b290:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b2a0:·2269·646d·3536·3835·223e·3c70·7265·3e3c··"idm5685"><pre>< | |||
| 0003b2b0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b2c0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b2d0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b2e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b2f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b300:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b310:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b320:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b330:·2223·6964·6d35·3638·3622·2074·6162·696e··"#idm5686"·tabin | |||
| 0003b340:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b350:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b360:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b370:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b380:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b390:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b3a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b3b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b3c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b3d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b3e0:·6d35·3638·3622·3e3c·7461·626c·6520·636c··m5686"><table·cl | |||
| 0003b3f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b400:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b410:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b420:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b430:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b440:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b450:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b460:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b470:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b480:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b490:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b4a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b4b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| Max diff block lines reached; 2153052/2180982 bytes (98.72%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:8 | 41 | ····*·cpe:/o:oracle:linux:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 100, 14 lines modified | Offset 100, 26 lines modified | ||
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 104 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 104 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 106 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | [[packages]] | ||
| 109 | name·=·"aide" | ||
| 110 | version·=·"*" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package·--add=aide | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | -·name:·Ensure·aide·is·installed | 122 | -·name:·Ensure·aide·is·installed |
| 113 | ··package: | 123 | ··package: |
| Offset 122, 19 lines modified | Offset 134, 14 lines modified | ||
| 122 | ··-·PCI-DSSv4-11.5.2 | 134 | ··-·PCI-DSSv4-11.5.2 |
| 123 | ··-·enable_strategy | 135 | ··-·enable_strategy |
| 124 | ··-·low_complexity | 136 | ··-·low_complexity |
| 125 | ··-·low_disruption | 137 | ··-·low_disruption |
| 126 | ··-·medium_severity | 138 | ··-·medium_severity |
| 127 | ··-·no_reboot_needed | 139 | ··-·no_reboot_needed |
| 128 | ··-·package_aide_installed | 140 | ··-·package_aide_installed |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 154, 21 lines modified | Offset 161, 14 lines modified | ||
| 154 | include·install_aide | 161 | include·install_aide |
| 155 | class·install_aide·{ | 162 | class·install_aide·{ |
| 156 | ··package·{·'aide': | 163 | ··package·{·'aide': |
| 157 | ····ensure·=>·'installed', | 164 | ····ensure·=>·'installed', |
| 158 | ··} | 165 | ··} |
| 159 | } | 166 | } |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·--add=aide | ||
| 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 167 | Run·the·following·command·to·generate·a·new·database: | 168 | Run·the·following·command·to·generate·a·new·database: |
| 168 | $·sudo·/usr/sbin/aide·--init | 169 | $·sudo·/usr/sbin/aide·--init |
| 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 170 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 170 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 171 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 171 | To·initiate·a·manual·check,·run·the·following·command: | 172 | To·initiate·a·manual·check,·run·the·following·command: |
| 172 | $·sudo·/usr/sbin/aide·--check | 173 | $·sudo·/usr/sbin/aide·--check |
| Offset 1683, 14 lines modified | Offset 1683, 18 lines modified | ||
| 1683 | ············_\x8i_\x8s_\x8m······1446 | 1683 | ············_\x8i_\x8s_\x8m······1446 |
| 1684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1688 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 1688 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 1689 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 1689 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 1690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1691 | [customizations] | ||
| 1692 | fips·=·true | ||
| 1690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1691 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1692 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1695 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1693 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1696 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1694 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1697 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1695 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1698 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1696 | ··set_fact: | 1699 | ··set_fact: |
| Offset 1790, 18 lines modified | Offset 1794, 14 lines modified | ||
| 1790 | ··-·NIST-800-53-SC-13 | 1794 | ··-·NIST-800-53-SC-13 |
| 1791 | ··-·enable_fips_mode | 1795 | ··-·enable_fips_mode |
| 1792 | ··-·high_severity | 1796 | ··-·high_severity |
| 1793 | ··-·medium_complexity | 1797 | ··-·medium_complexity |
| 1794 | ··-·medium_disruption | 1798 | ··-·medium_disruption |
| 1795 | ··-·reboot_required | 1799 | ··-·reboot_required |
| 1796 | ··-·restrict_strategy | 1800 | ··-·restrict_strategy |
| 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1798 | [customizations] | ||
| 1799 | fips·=·true | ||
| 1800 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1801 | #·Remediation·is·applicable·only·in·certain·platforms | 1802 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1802 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1803 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1803 | var_system_crypto_policy='FIPS' | 1804 | var_system_crypto_policy='FIPS' |
| Offset 5388, 14 lines modified | Offset 5388, 26 lines modified | ||
| 5388 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. | 5388 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. |
| 5389 | Severity: ··low | 5389 | Severity: ··low |
| 5390 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed | 5390 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed |
| 5391 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 5391 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| Max diff block lines reached; 178552/184765 bytes (96.64%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e40:·3032·3 | 00037e40:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15095, 202 lines modified | Offset 15095, 202 lines modified | ||
| 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | ||
| 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003afd0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003afe0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003aff0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b000:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b010:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b020:·6d35·3638·3422·3e3c·7072·653e·3c63·6f64··m5684"><pre><cod | |||
| 0003b030:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b040:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b050:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003afd0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003afe0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aff0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b000:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b010:·6964·3d22·6964·6d35·3638·3422·3e3c·7461··id="idm5684"><ta | |||
| 0003b020:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b030:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b040:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b050:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b060:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b070:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b080:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b090:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b0a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b0b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b100:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b110:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b120:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b130:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b140:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b150:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b160:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b170:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b180:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b190:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b1a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b1b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b1c0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b1d0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b1e0:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b1f0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b200:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b210:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b220:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b230:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b240:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b250:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b260:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b270:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b280:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b290:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b2a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b2b0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b2c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b2d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b2e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b2f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b300:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b310:·3835·2220·7461·6269·6e64·6578·3d22·3022··85"·tabindex="0" | |||
| 0003b320:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b330:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b340:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b350:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b360:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b370:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b380:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b390:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b3a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b3b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b3c0:·6964·3d22·6964·6d35·3638·3522·3e3c·7072··id="idm5685"><pr | |||
| 0003b3d0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b3e0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b3f0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b400:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b410:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b420:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b430:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b440:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b450:·6574·3d22·2369·646d·3536·3836·2220·7461··et="#idm5686"·ta | |||
| 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b4c0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b4d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b4e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b4f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b500:·2269·646d·3536·3836·223e·3c74·6162·6c65··"idm5686"><table | |||
| 0003b510:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b520:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b530:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b540:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b550:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b560:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b570:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b580:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b5b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| Max diff block lines reached; 2133769/2161423 bytes (98.72%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·8 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:8 | 46 | ····*·cpe:/o:oracle:linux:8 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 104, 14 lines modified | Offset 104, 26 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 108 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"aide" | ||
| 114 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | package·--add=aide | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | -·name:·Ensure·aide·is·installed | 126 | -·name:·Ensure·aide·is·installed |
| 117 | ··package: | 127 | ··package: |
| Offset 126, 19 lines modified | Offset 138, 14 lines modified | ||
| 126 | ··-·PCI-DSSv4-11.5.2 | 138 | ··-·PCI-DSSv4-11.5.2 |
| 127 | ··-·enable_strategy | 139 | ··-·enable_strategy |
| 128 | ··-·low_complexity | 140 | ··-·low_complexity |
| 129 | ··-·low_disruption | 141 | ··-·low_disruption |
| 130 | ··-·medium_severity | 142 | ··-·medium_severity |
| 131 | ··-·no_reboot_needed | 143 | ··-·no_reboot_needed |
| 132 | ··-·package_aide_installed | 144 | ··-·package_aide_installed |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | 150 | #·Remediation·is·applicable·only·in·certain·platforms |
| 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 21 lines modified | Offset 165, 14 lines modified | ||
| 158 | include·install_aide | 165 | include·install_aide |
| 159 | class·install_aide·{ | 166 | class·install_aide·{ |
| 160 | ··package·{·'aide': | 167 | ··package·{·'aide': |
| 161 | ····ensure·=>·'installed', | 168 | ····ensure·=>·'installed', |
| 162 | ··} | 169 | ··} |
| 163 | } | 170 | } |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·--add=aide | ||
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 171 | Run·the·following·command·to·generate·a·new·database: | 172 | Run·the·following·command·to·generate·a·new·database: |
| 172 | $·sudo·/usr/sbin/aide·--init | 173 | $·sudo·/usr/sbin/aide·--init |
| 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 174 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 174 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 175 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 175 | To·initiate·a·manual·check,·run·the·following·command: | 176 | To·initiate·a·manual·check,·run·the·following·command: |
| 176 | $·sudo·/usr/sbin/aide·--check | 177 | $·sudo·/usr/sbin/aide·--check |
| Offset 1687, 14 lines modified | Offset 1687, 18 lines modified | ||
| 1687 | ············_\x8i_\x8s_\x8m······1446 | 1687 | ············_\x8i_\x8s_\x8m······1446 |
| 1688 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1688 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1689 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1689 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1690 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1690 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1691 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1691 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1692 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 1692 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 1693 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 1693 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 1694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1695 | [customizations] | ||
| 1696 | fips·=·true | ||
| 1694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1695 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1698 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1696 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1699 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1697 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1700 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1698 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1701 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1699 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1702 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1700 | ··set_fact: | 1703 | ··set_fact: |
| Offset 1794, 18 lines modified | Offset 1798, 14 lines modified | ||
| 1794 | ··-·NIST-800-53-SC-13 | 1798 | ··-·NIST-800-53-SC-13 |
| 1795 | ··-·enable_fips_mode | 1799 | ··-·enable_fips_mode |
| 1796 | ··-·high_severity | 1800 | ··-·high_severity |
| 1797 | ··-·medium_complexity | 1801 | ··-·medium_complexity |
| 1798 | ··-·medium_disruption | 1802 | ··-·medium_disruption |
| 1799 | ··-·reboot_required | 1803 | ··-·reboot_required |
| 1800 | ··-·restrict_strategy | 1804 | ··-·restrict_strategy |
| 1801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1802 | [customizations] | ||
| 1803 | fips·=·true | ||
| 1804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1805 | #·Remediation·is·applicable·only·in·certain·platforms | 1806 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1806 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1807 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1807 | var_system_crypto_policy='FIPS' | 1808 | var_system_crypto_policy='FIPS' |
| Offset 5392, 14 lines modified | Offset 5392, 26 lines modified | ||
| 5392 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. | 5392 | Rationale:··rng-tools·provides·hardware·random·number·generator·tools,·such·as·those·used·in·the·formation·of·x509/PKI·certificates. |
| 5393 | Severity: ··low | 5393 | Severity: ··low |
| 5394 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed | 5394 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_rng-tools_installed |
| 5395 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 5395 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| Max diff block lines reached; 176285/182511 bytes (96.59%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e40:·6173·206f·6620·3230·323 | 00037e40:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15037, 200 lines modified | Offset 15037, 200 lines modified | ||
| 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | ||
| 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ac30:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ac40:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ac50:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ac60:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ac70:·6522·2069·643d·2269·646d·3532·3232·223e··e"·id="idm5222"> | |||
| 0003ac80:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ac90:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aca0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003acb0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003acc0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003acd0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ace0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ac | 0003ac30:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003ac40:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ac50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ac60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ac70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ac80:·2269·646d·3532·3232·223e·3c70·7265·3e3c··"idm5222"><pre>< | |||
| 0003ac90:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003aca0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003acb0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003acc0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003acd0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ace0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003acf0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ad00:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ad10:·2223·6964·6d35·3232·3322·2074·6162·696e··"#idm5223"·tabin | |||
| 0003ad20:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ad30:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ad40:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ad50:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ad60:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ad70:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003ad80:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003ad90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ada0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003adb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003adc0:·3d22·6964·6d35·3232·3322·3e3c·7461·626c··="idm5223"><tabl | |||
| 0003add0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ade0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003adf0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ae00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ae10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a | 0003ae20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003a | 0003ae30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003ad20:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ad30:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003a | 0003ae40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003ae50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ae60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a | 0003ae70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003ae80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ad60:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ad70:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ad80:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003ad90:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003ada0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003adb0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003adc0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003add0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003ade0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003adf0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003ae00:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003ae10:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003ae20:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003ae30:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003ae40:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003ae50:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003ae60:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003ae70:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003ae80:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003ae90:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003aea0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003aeb0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003aec0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003aed0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003aee0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003aef0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003af00:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003af10:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003af20:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003af30:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003af40:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003af50:·2369·646d·3532·3233·2220·7461·6269·6e64··#idm5223"·tabind | |||
| 0003af60:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003af70:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003af80:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003af90:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003afa0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003afb0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003afc0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003afd0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afe0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003aff0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b000:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 0003b010:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0003b020:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b030:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b040:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b050:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b060:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b070:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b080:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b090:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | |||
| Max diff block lines reached; 1427778/1455156 bytes (98.12%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 26 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 135 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 136 | ··package: |
| Offset 134, 19 lines modified | Offset 146, 14 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 148 | ··-·low_complexity |
| 137 | ··-·low_disruption | 149 | ··-·low_disruption |
| 138 | ··-·medium_severity | 150 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 173, 14 lines modified | ||
| 166 | include·install_aide | 173 | include·install_aide |
| 167 | class·install_aide·{ | 174 | class·install_aide·{ |
| 168 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 169 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 170 | ··} | 177 | ··} |
| 171 | } | 178 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 469, 14 lines modified | Offset 469, 21 lines modified | ||
| 469 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 469 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 470 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 470 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 471 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 471 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 472 | ············/tmp·directory·is·wiped·during·reboot. | 472 | ············/tmp·directory·is·wiped·during·reboot. |
| 473 | Severity: ··low | 473 | Severity: ··low |
| 474 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 474 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 475 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 475 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 481 | services·--enabled=tmp.mount | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 481 | -·name:·Enable·mount·tmp | 487 | -·name:·Enable·mount·tmp |
| 482 | ··ansible.builtin.systemd: | 488 | ··ansible.builtin.systemd: |
| Offset 504, 21 lines modified | Offset 511, 14 lines modified | ||
| 504 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 511 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 505 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 512 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 506 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 513 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 507 | else | 514 | else |
| 508 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 515 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 509 | fi | 516 | fi |
| 510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 515 | services·--enabled=tmp.mount | ||
| 516 | Group ·Sudo· Group·contains·14·rules | 517 | Group ·Sudo· Group·contains·14·rules |
| 517 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 518 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 518 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 519 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 519 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 520 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 520 | execute. | 521 | execute. |
| Max diff block lines reached; 89092/95143 bytes (93.64%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e30:·6173·206f·6620·3230·323 | 00037e30:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15042, 201 lines modified | Offset 15042, 201 lines modified | ||
| 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ac80:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003ac90:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ac80:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ac90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003aca0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003acb0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003acc0:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 0003acd0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003ace0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003acf0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ad00:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ad10:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ad20:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ad30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ad40:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ad50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ad70:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ad80:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ad90:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ada0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003adb0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003adc0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003add0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003ade0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003adf0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003ae00:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003ae10:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003ae20:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003ae30:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003ae40:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003ae50:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003ae60:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003ae70:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003ae80:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ae90:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003aea0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003aeb0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003aec0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003aed0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003aee0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003aef0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003af00:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003af10:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003af20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003af30:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003af40:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003af50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003af60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003af70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003af80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003afa0:·743d·2223·6964·6d35·3232·3322·2074·6162··t="#idm5223"·tab | |||
| 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b010:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b020:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b030:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b040:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b050:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b060:·3532·3233·223e·3c70·7265·3e3c·636f·6465··5223"><pre><code | |||
| 0003b070:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b080:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b090:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b0a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b0b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b0c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b0d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b0e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b0f0:·6d35·3232·3422·2074·6162·696e·6465·783d··m5224"·tabindex= | |||
| 0003b100:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b110:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b120:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b130:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b140:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b150:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b160:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b170:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b180:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b190:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 0003b1a0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003b1b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b1d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b1e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b1f0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b200:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b210:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b220:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b230:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b240:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b250:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b260:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b270:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b280:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b290:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b2a0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b2b0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b2c0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b2d0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| Max diff block lines reached; 1506666/1534182 bytes (98.21%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 14 lines modified | Offset 114, 26 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 137 | ··package: |
| Offset 135, 19 lines modified | Offset 147, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 149 | ··-·low_complexity |
| 138 | ··-·low_disruption | 150 | ··-·low_disruption |
| 139 | ··-·medium_severity | 151 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 174, 14 lines modified | ||
| 167 | include·install_aide | 174 | include·install_aide |
| 168 | class·install_aide·{ | 175 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 171 | ··} | 178 | ··} |
| 172 | } | 179 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 980, 14 lines modified | Offset 980, 21 lines modified | ||
| 980 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 980 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 981 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 981 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 982 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 982 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 983 | ············/tmp·directory·is·wiped·during·reboot. | 983 | ············/tmp·directory·is·wiped·during·reboot. |
| 984 | Severity: ··low | 984 | Severity: ··low |
| 985 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 985 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 986 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 986 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 988 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 989 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 990 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 991 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 992 | services·--enabled=tmp.mount | ||
| 987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 993 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 988 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 994 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 989 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 995 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 990 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 996 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 991 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 997 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 992 | -·name:·Enable·mount·tmp | 998 | -·name:·Enable·mount·tmp |
| 993 | ··ansible.builtin.systemd: | 999 | ··ansible.builtin.systemd: |
| Offset 1015, 21 lines modified | Offset 1022, 14 lines modified | ||
| 1015 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 1022 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 1016 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 1023 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 1017 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 1024 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 1018 | else | 1025 | else |
| 1019 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1026 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1020 | fi | 1027 | fi |
| 1021 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1022 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1023 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1024 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1025 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1026 | services·--enabled=tmp.mount | ||
| 1027 | Group ·Sudo· Group·contains·14·rules | 1028 | Group ·Sudo· Group·contains·14·rules |
| 1028 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 1029 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 1029 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 1030 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 1030 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 1031 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 1031 | execute. | 1032 | execute. |
| Max diff block lines reached; 94732/100789 bytes (93.99%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e50:·6173·206f·6620·3230·323 | 00037e50:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15028, 200 lines modified | Offset 15028, 200 lines modified | ||
| 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | ||
| 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aba0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003aba0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003abb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003abc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003abd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003abe0:·7365·2220·6964·3d22·6964·6d35·3232·3222··se"·id="idm5222" | |||
| 0003abf0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ac00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ac10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ac20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ac30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ac40:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ac50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ac60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ac70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ac80:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ac90:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003aca0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003acb0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003acc0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003acd0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ace0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003acf0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ad00:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ad10:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ad20:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003ad30:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003ad40:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003ad50:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003ad60:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003ad70:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003ad80:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003ad90:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003ada0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003adb0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003adc0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003add0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003ade0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003adf0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003ae00:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003ae10:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003ae20:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003ae30:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003ae40:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003ae50:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003ae60:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003ae70:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ae80:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ae90:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003aea0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003aeb0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003aec0:·2223·6964·6d35·3232·3322·2074·6162·696e··"#idm5223"·tabin | |||
| 0003aed0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003aee0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003aef0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003af00:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003af10:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003af20:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003af30:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003af40:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003af50:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003af60:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af70:·6c61·7073·6522·2069·643d·2269·646d·3532··lapse"·id="idm52 | |||
| 0003af80:·3233·223e·3c70·7265·3e3c·636f·6465·3e0a··23"><pre><code>. | |||
| 0003af90:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003afa0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003afb0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003afc0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003afd0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003afe0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003aff0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b000:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b010:·3232·3422·2074·6162·696e·6465·783d·2230··224"·tabindex="0 | |||
| 0003b020:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b030:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b040:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b050:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b060:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b070:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b080:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b090:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0b0:·7365·2220·6964·3d22·6964·6d35·3232·3422··se"·id="idm5224" | |||
| 0003b0c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b0d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b0e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b100:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b110:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b120:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b130:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b140:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b150:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b160:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b170:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b180:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b190:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b1a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b1b0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b1c0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b1d0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b1e0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b1f0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b200:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| Max diff block lines reached; 1280222/1307600 bytes (97.91%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 26 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 124 | ··package: | 134 | ··package: |
| Offset 132, 19 lines modified | Offset 144, 14 lines modified | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 133 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 146 | ··-·low_complexity |
| 135 | ··-·low_disruption | 147 | ··-·low_disruption |
| 136 | ··-·medium_severity | 148 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 138 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 171, 14 lines modified | ||
| 164 | include·install_aide | 171 | include·install_aide |
| 165 | class·install_aide·{ | 172 | class·install_aide·{ |
| 166 | ··package·{·'aide': | 173 | ··package·{·'aide': |
| 167 | ····ensure·=>·'installed', | 174 | ····ensure·=>·'installed', |
| 168 | ··} | 175 | ··} |
| 169 | } | 176 | } |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 179 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 182 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 434, 14 lines modified | Offset 434, 21 lines modified | ||
| 434 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 434 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 435 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 435 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 436 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 436 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 437 | ············/tmp·directory·is·wiped·during·reboot. | 437 | ············/tmp·directory·is·wiped·during·reboot. |
| 438 | Severity: ··low | 438 | Severity: ··low |
| 439 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 439 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 440 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 440 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 446 | services·--enabled=tmp.mount | ||
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 446 | -·name:·Enable·mount·tmp | 452 | -·name:·Enable·mount·tmp |
| 447 | ··ansible.builtin.systemd: | 453 | ··ansible.builtin.systemd: |
| Offset 469, 21 lines modified | Offset 476, 14 lines modified | ||
| 469 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 476 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 470 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 477 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 471 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 478 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| 472 | else | 479 | else |
| 473 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 480 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 474 | fi | 481 | fi |
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 480 | services·--enabled=tmp.mount | ||
| 481 | Group ·Sudo· Group·contains·13·rules | 482 | Group ·Sudo· Group·contains·13·rules |
| 482 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 483 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 483 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 484 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 484 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 485 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 485 | execute. | 486 | execute. |
| Max diff block lines reached; 73312/79482 bytes (92.24%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e40:·6620·3230·323 | 00037e40:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 14718, 182 lines modified | Offset 14718, 182 lines modified | ||
| 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | ||
| 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00039840:·4 | 00039840:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 00039850:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 00039860:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039870:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039880:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039890:·6d38·3433·3922·3e3c·7072·653e·3c63·6f64··m8439"><pre><cod | |||
| 000398a0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 000398b0:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 000398c0:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 000398d0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 000398e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 000398f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00039900:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00039910:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00039920:·6172·6765·743d·2223·6964·6d38·3434·3022··arget="#idm8440" | |||
| 00039930:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00039940:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00039950:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00039960:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00039970:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00039980:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00039990:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 00039 | 000399a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 00039860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00039870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00039880:·6964·3d22·6964·6d38·3433·3922·3e3c·7461··id="idm8439"><ta | |||
| 00039 | 000399b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 000399c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000399d0:·7365·2220·6964·3d22·6964·6d38·3434·3022··se"·id="idm8440" | |||
| 000399e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039 | 000399f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 00039 | 00039a00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039a10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039a20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039a30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039a40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039a50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039a60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039a70:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039a80:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039a90:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039aa0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039ab0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039ac0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039ad0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 00039ae0:·6520·2d2d·6164·643d·646e·662d·6175·746f··e·--add=dnf-auto | |||
| 00039af0:·6d61·7469·630a·3c2f·636f·6465·3e3c·2f70··matic.</code></p | |||
| 00039b00:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00039b10:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00039b20:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00039b30:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00039b40:·7461·7267·6574·3d22·2369·646d·3834·3431··target="#idm8441 | |||
| 00039b50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00039b60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00039b70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00039b80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00039b90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00039ba0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00039bb0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039bc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039bd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039be0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039bf0:·7365·2220·6964·3d22·6964·6d38·3434·3122··se"·id="idm8441" | |||
| 00039c00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039 | 00039c30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039 | 00039c40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 00039c50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039c70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039c80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039c90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039ca0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039cb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039cd0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039ce0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039cf0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00039d00:·2045·6e73·7572·6520·646e·662d·6175·746f···Ensure·dnf-auto | |||
| 00039d10:·6d61·7469·6320·6973·2069·6e73·7461·6c6c··matic·is·install | |||
| 00039d20:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 00039d30:·2020·6e61·6d65·3a20·646e·662d·6175·746f····name:·dnf-auto | |||
| 00039d40:·6d61·7469·630a·2020·2020·7374·6174·653a··matic.····state: | |||
| 00039d50:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 00039d60:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 00039d70:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 00039d80:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 00039d90:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 00039da0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 00039db0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039dc0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039dd0:·646e·662d·6175·746f·6d61·7469·635f·696e··dnf-automatic_in | |||
| 00039de0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00039df0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039e00:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039e10:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039e20:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039e30:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 00039e40:·3432·2220·7461·6269·6e64·6578·3d22·3022··42"·tabindex="0" | |||
| 00039e50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039e60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039e70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039e80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| Max diff block lines reached; 236122/261016 bytes (90.46%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 14 lines modified | Offset 80, 26 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"dnf-automatic" | ||
| 90 | version·=·"*" | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | package·--add=dnf-automatic | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | -·name:·Ensure·dnf-automatic·is·installed | 102 | -·name:·Ensure·dnf-automatic·is·installed |
| 93 | ··package: | 103 | ··package: |
| Offset 96, 19 lines modified | Offset 108, 14 lines modified | ||
| 96 | ··tags: | 108 | ··tags: |
| 97 | ··-·enable_strategy | 109 | ··-·enable_strategy |
| 98 | ··-·low_complexity | 110 | ··-·low_complexity |
| 99 | ··-·low_disruption | 111 | ··-·low_disruption |
| 100 | ··-·medium_severity | 112 | ··-·medium_severity |
| 101 | ··-·no_reboot_needed | 113 | ··-·no_reboot_needed |
| 102 | ··-·package_dnf-automatic_installed | 114 | ··-·package_dnf-automatic_installed |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | [[packages]] | ||
| 105 | name·=·"dnf-automatic" | ||
| 106 | version·=·"*" | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 120 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 122, 21 lines modified | Offset 129, 14 lines modified | ||
| 122 | include·install_dnf-automatic | 129 | include·install_dnf-automatic |
| 123 | class·install_dnf-automatic·{ | 130 | class·install_dnf-automatic·{ |
| 124 | ··package·{·'dnf-automatic': | 131 | ··package·{·'dnf-automatic': |
| 125 | ····ensure·=>·'installed', | 132 | ····ensure·=>·'installed', |
| 126 | ··} | 133 | ··} |
| 127 | } | 134 | } |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=dnf-automatic | ||
| 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 135 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 136 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 137 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 137 | automatic.conf. | 138 | automatic.conf. |
| 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 139 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 140 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 141 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 10640, 14 lines modified | Offset 10640, 21 lines modified | ||
| 10640 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 10640 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 10641 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 10641 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 10642 | ···························A.9.1.2 | 10642 | ···························A.9.1.2 |
| 10643 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10643 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10644 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 10644 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 10645 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10645 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10646 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 10646 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 10647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10652 | package·--remove=dhcp | ||
| 10647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10657 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10652 | -·name:·Ensure·dhcp·is·removed | 10658 | -·name:·Ensure·dhcp·is·removed |
| 10653 | ··package: | 10659 | ··package: |
| Offset 10689, 21 lines modified | Offset 10696, 14 lines modified | ||
| 10689 | include·remove_dhcp | 10696 | include·remove_dhcp |
| 10690 | class·remove_dhcp·{ | 10697 | class·remove_dhcp·{ |
| 10691 | ··package·{·'dhcp': | 10698 | ··package·{·'dhcp': |
| 10692 | ····ensure·=>·'purged', | 10699 | ····ensure·=>·'purged', |
| 10693 | ··} | 10700 | ··} |
| 10694 | } | 10701 | } |
| 10695 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10696 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10697 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10698 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10699 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10700 | package·--remove=dhcp | ||
| 10701 | Group ·Mail·Server·Software· Group·contains·1·rule | 10702 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 10702 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 10703 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 10703 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 10704 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 10704 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 10705 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 10705 | possible. | 10706 | possible. |
| Max diff block lines reached; 17563/23361 bytes (75.18%) of diff not shown. | |||
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038010:·323 | 00038010:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15496, 256 lines modified | Offset 15496, 256 lines modified | ||
| 0003c870:·612d·7461·7267·6574·3d22·2369·646d·3537··a-target="#idm57 | 0003c870:·612d·7461·7267·6574·3d22·2369·646d·3537··a-target="#idm57 | ||
| 0003c880:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | 0003c880:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | ||
| 0003c890:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003c890:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c8a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003c8a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c8b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003c8b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c8c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003c8c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c8d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003c8d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c8e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c8f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c900:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c910:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c920:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c930:·6964·3d22·6964·6d35·3736·3222·3e3c·7072··id="idm5762"><pr | |||
| 0003c940:·653e·3c63·6f64·653e·0a5b·6375·7374·6f6d··e><code>.[custom | |||
| 0003c950:·697a·6174·696f·6e73·5d0a·6669·7073·203d··izations].fips·= | |||
| 0003c960:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | |||
| 0003c970:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c980:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c990:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c9a0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c9b0:·7461·7267·6574·3d22·2369·646d·3537·3633··target="#idm5763 | |||
| 0003c9c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c9d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c9e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c9f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ca00:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ca10:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c | 0003ca20:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003c | 0003ca30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003c | 0003ca40:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003c | 0003ca50:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003c | 0003ca60:·7365·2220·6964·3d22·6964·6d35·3736·3322··se"·id="idm5763" | ||
| 0003c | 0003ca70:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003c | 0003ca80:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003c | 0003ca90:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003c | 0003caa0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003c | 0003cab0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c | 0003cac0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6d··exity:</th><td>m | ||
| 0003c | 0003cad0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003c | 0003cae0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003c | 0003caf0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003c | 0003cb00:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003c | 0003cb10:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003c | 0003cb20:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | ||
| 0003c | 0003cb30:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003c | 0003cb40:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003c | 0003cb50:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003c | 0003cb60:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003c | 0003cb70:·2d20·6e61·6d65·3a20·5843·4344·4620·5661··-·name:·XCCDF·Va | ||
| 0003c | 0003cb80:·6c75·6520·7661·725f·7379·7374·656d·5f63··lue·var_system_c | ||
| 0003c | 0003cb90:·7279·7074·6f5f·706f·6c69·6379·2023·2070··rypto_policy·#·p | ||
| 0003c | 0003cba0:·726f·6d6f·7465·2074·6f20·7661·7269·6162··romote·to·variab | ||
| 0003c | 0003cbb0:·6c65·0a20·2073·6574·5f66·6163·743a·0a20··le.··set_fact:.· | ||
| 0003c | 0003cbc0:·2020·2076·6172·5f73·7973·7465·6d5f·6372·····var_system_cr | ||
| 0003c | 0003cbd0:·7970·746f·5f70·6f6c·6963·793a·2021·2173··ypto_policy:·!!s | ||
| 0003c | 0003cbe0:·7472·203c·6162·6272·2074·6974·6c65·3d22··tr·<abbr·title=" | ||
| 0003c | 0003cbf0:·6672·6f6d·2050·726f·6669·6c65·2f72·6566··from·Profile/ref | ||
| 0003c | 0003cc00:·696e·652d·7661·6c75·653a·2078·6363·6466··ine-value:·xccdf | ||
| 0003c | 0003cc10:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 0003c | 0003cc20:·636f·6e74·656e·745f·7661·6c75·655f·7661··content_value_va | ||
| 0003c | 0003cc30:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003c | 0003cc40:·706f·6c69·6379·223e·4649·5053·3a4f·5350··policy">FIPS:OSP | ||
| 0003c | 0003cc50:·503c·2f61·6262·723e·0a20·2074·6167·733a··P</abbr>.··tags: | ||
| 0003c | 0003cc60:·0a20·2020·202d·2061·6c77·6179·730a·0a2d··.····-·always..- | ||
| 0003c | 0003cc70:·206e·616d·653a·2045·6e61·626c·6520·4649···name:·Enable·FI | ||
| 0003c | 0003cc80:·5053·204d·6f64·6520·2d20·4368·6563·6b20··PS·Mode·-·Check· | ||
| 0003c | 0003cc90:·746f·2053·6565·2074·6865·2043·7572·7265··to·See·the·Curre | ||
| 0003c | 0003cca0:·6e74·2053·7461·7475·7320·6f66·2046·4950··nt·Status·of·FIP | ||
| 0003c | 0003ccb0:·5320·4d6f·6465·0a20·2061·6e73·6962·6c65··S·Mode.··ansible | ||
| 0003c | 0003ccc0:·2e62·7569·6c74·696e·2e63·6f6d·6d61·6e64··.builtin.command | ||
| 0003c | 0003ccd0:·3a20·2f75·7372·2f62·696e·2f66·6970·732d··:·/usr/bin/fips- | ||
| 0003c | 0003cce0:·6d6f·6465·2d73·6574·7570·202d·2d63·6865··mode-setup·--che | ||
| 0003c | 0003ccf0:·636b·0a20·2072·6567·6973·7465·723a·2069··ck.··register:·i | ||
| 0003c | 0003cd00:·735f·6669·7073·5f65·6e61·626c·6564·0a20··s_fips_enabled.· | ||
| 0003c | 0003cd10:·2066·6169·6c65·645f·7768·656e·3a20·6661···failed_when:·fa | ||
| 0003c | 0003cd20:·6c73·650a·2020·6368·616e·6765·645f·7768··lse.··changed_wh | ||
| 0003c | 0003cd30:·656e·3a20·6661·6c73·650a·2020·7768·656e··en:·false.··when | ||
| 0003c | 0003cd40:·3a0a·2020·2d20·2820·616e·7369·626c·655f··:.··-·(·ansible_ | ||
| 0003c | 0003cd50:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 0003c | 0003cd60:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 0003c | 0003cd70:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 0003c | 0003cd80:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 0003c | 0003cd90:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 0003c | 0003cda0:·2020·616e·6420·6e6f·7420·2820·6c6f·6f6b····and·not·(·look | ||
| 0003c | 0003cdb0:·7570·2822·656e·7622·2c20·2263·6f6e·7461··up("env",·"conta | ||
| 0003c | 0003cdc0:·696e·6572·2229·203d·3d20·2262·7772·6170··iner")·==·"bwrap | ||
| 0003c | 0003cdd0:·2d6f·7362·7569·6c64·2220·2920·290a·2020··-osbuild"·)·).·· | ||
| 0003c | 0003cde0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 0003c | 0003cdf0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 0003c | 0003ce00:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 0003c | 0003ce10:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 0003c | 0003ce20:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 0003c | 0003ce30:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 0003c | 0003ce40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003ce50:·434d·2d33·2836·290a·2020·2d20·4e49·5354··CM-3(6).··-·NIST | ||
| 0003c | 0003ce60:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | ||
| 0003c | 0003ce70:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003ce80:·4941·2d37·0a20·202d·204e·4953·542d·3830··IA-7.··-·NIST-80 | ||
| 0003c | 0003ce90:·302d·3533·2d53·432d·3132·0a20·202d·204e··0-53-SC-12.··-·N | ||
| 0003cea0:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003ceb0:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 0003cec0:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 0003c | 0003ced0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | ||
| 0003cee0:·3133·0a20·202d·2065·6e61·626c·655f·6669··13.··-·enable_fi | |||
| 0003cef0:·7073·5f6d·6f64·650a·2020·2d20·6869·6768··ps_mode.··-·high | |||
| 0003cf00:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | |||
| 0003cf10:·6469·756d·5f63·6f6d·706c·6578·6974·790a··dium_complexity. | |||
| 0003cf20:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003cf30:·7074·696f·6e0a·2020·2d20·7265·626f·6f74··ption.··-·reboot | |||
| 0003cf40:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | |||
| 0003cf50:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | |||
| Max diff block lines reached; 1012605/1047711 bytes (96.65%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:9 | 54 | ····*·cpe:/o:oracle:linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 195, 14 lines modified | Offset 195, 18 lines modified | ||
| 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 197 | ············_\x8i_\x8s_\x8m······1446 | 197 | ············_\x8i_\x8s_\x8m······1446 |
| 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | [customizations] | ||
| 204 | fips·=·true | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 210 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 208 | ··set_fact: | 211 | ··set_fact: |
| Offset 298, 18 lines modified | Offset 302, 14 lines modified | ||
| 298 | ··-·NIST-800-53-SC-13 | 302 | ··-·NIST-800-53-SC-13 |
| 299 | ··-·enable_fips_mode | 303 | ··-·enable_fips_mode |
| 300 | ··-·high_severity | 304 | ··-·high_severity |
| 301 | ··-·medium_complexity | 305 | ··-·medium_complexity |
| 302 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 303 | ··-·reboot_required | 307 | ··-·reboot_required |
| 304 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 306 | [customizations] | ||
| 307 | fips·=·true | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 309 | #·Remediation·is·applicable·only·in·certain·platforms | 310 | #·Remediation·is·applicable·only·in·certain·platforms |
| 310 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 311 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 311 | var_system_crypto_policy='FIPS:OSPP' | 312 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 347, 14 lines modified | Offset 347, 26 lines modified | ||
| 347 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 347 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 348 | $·sudo·yum·install·crypto-policies | 348 | $·sudo·yum·install·crypto-policies |
| 349 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 349 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 350 | Severity: ··medium | 350 | Severity: ··medium |
| 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 352 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 352 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 353 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 353 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 355 | [[packages]] | ||
| 356 | name·=·"crypto-policies" | ||
| 357 | version·=·"*" | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 363 | package·--add=crypto-policies | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 359 | -·name:·Ensure·crypto-policies·is·installed | 369 | -·name:·Ensure·crypto-policies·is·installed |
| 360 | ··package: | 370 | ··package: |
| Offset 363, 19 lines modified | Offset 375, 14 lines modified | ||
| 363 | ··tags: | 375 | ··tags: |
| 364 | ··-·enable_strategy | 376 | ··-·enable_strategy |
| 365 | ··-·low_complexity | 377 | ··-·low_complexity |
| 366 | ··-·low_disruption | 378 | ··-·low_disruption |
| 367 | ··-·medium_severity | 379 | ··-·medium_severity |
| 368 | ··-·no_reboot_needed | 380 | ··-·no_reboot_needed |
| 369 | ··-·package_crypto-policies_installed | 381 | ··-·package_crypto-policies_installed |
| 370 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 371 | [[packages]] | ||
| 372 | name·=·"crypto-policies" | ||
| 373 | version·=·"*" | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 379 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 387 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 389, 21 lines modified | Offset 396, 14 lines modified | ||
| 389 | include·install_crypto-policies | 396 | include·install_crypto-policies |
| 390 | class·install_crypto-policies·{ | 397 | class·install_crypto-policies·{ |
| 391 | ··package·{·'crypto-policies': | 398 | ··package·{·'crypto-policies': |
| 392 | ····ensure·=>·'installed', | 399 | ····ensure·=>·'installed', |
| 393 | ··} | 400 | ··} |
| 394 | } | 401 | } |
| 395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 398 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 399 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 400 | package·--add=crypto-policies | ||
| 401 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 402 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 402 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 403 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 403 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 404 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 404 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 405 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 405 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 406 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 406 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 407 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 407 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 408 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 712, 14 lines modified | Offset 712, 26 lines modified | ||
| 712 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 712 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 713 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 713 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 714 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 714 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 715 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 715 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| Max diff block lines reached; 118505/126589 bytes (93.61%) of diff not shown. | |||
| Offset 14296, 16 lines modified | Offset 14296, 16 lines modified | ||
| 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037de0:·2020·2861·7320·6f66·2032·3032·3 | 00037de0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037df0:·2d3 | 00037df0:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19007, 273 lines modified | Offset 19007, 273 lines modified | ||
| 0004a3e0:·612d·7461·7267·6574·3d22·2369·646d·3833··a-target="#idm83 | 0004a3e0:·612d·7461·7267·6574·3d22·2369·646d·3833··a-target="#idm83 | ||
| 0004a3f0:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | 0004a3f0:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | ||
| 0004a400:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0004a400:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004a410:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0004a410:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004a420:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0004a420:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004a430:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0004a430:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004a440:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0004a440:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004a450:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0004a460:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004a470:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004a480:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004a490:·6170·7365·2220·6964·3d22·6964·6d38·3331··apse"·id="idm831 | |||
| 0004a4a0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0004a4b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0004a4c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0004a4d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0004a4e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0004a4f0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0004a500:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004a | 0004a450:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0004a460:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0004a470:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004a480:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004a490:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004a4a0:·6964·3d22·6964·6d38·3331·3222·3e3c·7072··id="idm8312"><pr | |||
| 0004a4b0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0004a4c0:·6765·735d·5d0a·6e61·6d65·203d·2022·7265··ges]].name·=·"re | |||
| 0004a4d0:·6172·220a·7665·7273·696f·6e20·3d20·222a··ar".version·=·"* | |||
| 0004a4e0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0004a4f0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0004a500:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0004a510:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0004a520:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0004a530:·6574·3d22·2369·646d·3833·3133·2220·7461··et="#idm8313"·ta | |||
| 0004a540:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0004a550:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0004a560:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0004a570:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0004a580:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0004a590:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0004a5a0:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 0004a5b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0004a5c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0004a5d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0004a5e0:·2069·643d·2269·646d·3833·3133·223e·3c74···id="idm8313"><t | |||
| 0004a5f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0004a600:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0004a610:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0004a620:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0004a630:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0004a | 0004a640:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0004a | 0004a650:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a660:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a670:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004a680:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a690:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0004a6a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a6b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0004a6c0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0004a6d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0004a6e0:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0004a6f0:·2d61·6464·3d72·6561·720a·3c2f·636f·6465··-add=rear.</code | |||
| 0004a700:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004a710:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004a720:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004a730:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004a740:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004a750:·3833·3134·2220·7461·6269·6e64·6578·3d22··8314"·tabindex=" | |||
| 0004a760:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0004a770:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0004a780:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0004a790:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0004a7a0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0004a7b0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0004a7c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0004a7d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0004a7e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0004a7f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0004a800:·3331·3422·3e3c·7461·626c·6520·636c·6173··314"><table·clas | |||
| 0004a810:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0004a820:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0004a830:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0004a840:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0004a850:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0004a860:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004a870:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0004a880:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0004a890:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a | 0004a8a0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a | 0004a8b0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0004a | 0004a8c0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0004a | 0004a8d0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0004a | 0004a8e0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a | 0004a8f0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0004a | 0004a900:·616d·653a·2045·6e73·7572·6520·7265·6172··ame:·Ensure·rear | ||
| 0004a | 0004a910:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | ||
| 0004a | 0004a920:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | ||
| 0004a | 0004a930:·653a·2072·6561·720a·2020·2020·7374·6174··e:·rear.····stat | ||
| 0004a | 0004a940:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | ||
| 0004a | 0004a950:·6e3a·206e·6f74·2028·2028·2028·2061·6e73··n:·not·(·(·(·ans | ||
| 0004a60 | 0004a960:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 0004a | 0004a970:·6520·3d3d·2022·6161·7263·6836·3422·2061··e·==·"aarch64"·a | ||
| 0004a980:·6e64·2061·6e73·6962·6c65·5f64·6973·7472··nd·ansible_distr | |||
| 0004a990:·6962·7574·696f·6e20·3d3d·2027·4f72·6163··ibution·==·'Orac | |||
| 0004a9a0:·6c65·4c69·6e75·7827·0a20·2020·2061·6e64··leLinux'.····and | |||
| 0004a | 0004a9b0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0004a630:·7574·696f·6e20·3d3d·2027·4f72·6163·6c65··ution·==·'Oracle | |||
| 0004a640:·4c69·6e75·7827·0a20·2020·2061·6e64·2061··Linux'.····and·a | |||
| 0004a650:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | |||
| 0004a | 0004a9c0:·7574·696f·6e5f·7665·7273·696f·6e20·6973··ution_version·is | ||
| Max diff block lines reached; 501923/539513 bytes (93.03%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 950, 14 lines modified | Offset 950, 26 lines modified | ||
| 950 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 950 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 951 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 951 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 952 | The·rear·package·can·be·installed·with·the·following·command: | 952 | The·rear·package·can·be·installed·with·the·following·command: |
| 953 | $·sudo·yum·install·rear | 953 | $·sudo·yum·install·rear |
| 954 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 954 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 955 | Severity: ·medium | 955 | Severity: ·medium |
| 956 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 956 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 958 | [[packages]] | ||
| 959 | name·=·"rear" | ||
| 960 | version·=·"*" | ||
| 961 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 962 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 963 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 964 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 965 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 966 | package·--add=rear | ||
| 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 967 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 958 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 968 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 959 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 969 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 960 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 970 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 961 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 971 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 962 | -·name:·Ensure·rear·is·installed | 972 | -·name:·Ensure·rear·is·installed |
| 963 | ··package: | 973 | ··package: |
| Offset 971, 19 lines modified | Offset 983, 14 lines modified | ||
| 971 | ··tags: | 983 | ··tags: |
| 972 | ··-·enable_strategy | 984 | ··-·enable_strategy |
| 973 | ··-·low_complexity | 985 | ··-·low_complexity |
| 974 | ··-·low_disruption | 986 | ··-·low_disruption |
| 975 | ··-·medium_severity | 987 | ··-·medium_severity |
| 976 | ··-·no_reboot_needed | 988 | ··-·no_reboot_needed |
| 977 | ··-·package_rear_installed | 989 | ··-·package_rear_installed |
| 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 979 | [[packages]] | ||
| 980 | name·=·"rear" | ||
| 981 | version·=·"*" | ||
| 982 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 990 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 983 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 991 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 984 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 992 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 985 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 993 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 986 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 994 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 987 | #·Remediation·is·applicable·only·in·certain·platforms | 995 | #·Remediation·is·applicable·only·in·certain·platforms |
| 988 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 996 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1003, 21 lines modified | Offset 1010, 14 lines modified | ||
| 1003 | include·install_rear | 1010 | include·install_rear |
| 1004 | class·install_rear·{ | 1011 | class·install_rear·{ |
| 1005 | ··package·{·'rear': | 1012 | ··package·{·'rear': |
| 1006 | ····ensure·=>·'installed', | 1013 | ····ensure·=>·'installed', |
| 1007 | ··} | 1014 | ··} |
| 1008 | } | 1015 | } |
| 1009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1010 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1011 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1012 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1013 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1014 | package·--add=rear | ||
| 1015 | Group ·Updating·Software· Group·contains·6·rules | 1016 | Group ·Updating·Software· Group·contains·6·rules |
| 1016 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 1017 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 1017 | Oracle·Linux·9·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 1018 | Oracle·Linux·9·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 1018 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1019 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1019 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | 1020 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. |
| Offset 1623, 38 lines modified | Offset 1623, 14 lines modified | ||
| 1623 | ··-·PCI-DSSv4-8.3.1 | 1623 | ··-·PCI-DSSv4-8.3.1 |
| 1624 | ··-·configure_strategy | 1624 | ··-·configure_strategy |
| 1625 | ··-·high_severity | 1625 | ··-·high_severity |
| 1626 | ··-·low_complexity | 1626 | ··-·low_complexity |
| 1627 | ··-·medium_disruption | 1627 | ··-·medium_disruption |
| 1628 | ··-·no_empty_passwords | 1628 | ··-·no_empty_passwords |
| 1629 | ··-·no_reboot_needed | 1629 | ··-·no_reboot_needed |
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1631 | --- | ||
| 1632 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1633 | kind:·MachineConfig | ||
| 1634 | spec: | ||
| 1635 | ··config: | ||
| 1636 | ····ignition: | ||
| 1637 | ······version:·3.1.0 | ||
| 1638 | ····storage: | ||
| 1639 | ······files: | ||
| 1640 | ······-·contents: | ||
| 1641 | ··········source: | ||
| 1642 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1643 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1644 | ········mode:·0644 | ||
| 1645 | ········path:·/etc/pam.d/password-auth | ||
| 1646 | ········overwrite:·true | ||
| 1647 | ······-·contents: | ||
| 1648 | ··········source: | ||
| 1649 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1650 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1651 | ········mode:·0644 | ||
| 1652 | ········path:·/etc/pam.d/system-auth | ||
| 1653 | ········overwrite:·true | ||
| 1654 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1655 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1656 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1657 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1658 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1659 | #·Remediation·is·applicable·only·in·certain·platforms | 1635 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1660 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1636 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1689, 14 lines modified | Offset 1665, 38 lines modified | ||
| 1689 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1665 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1690 | fi | 1666 | fi |
| 1691 | fi | 1667 | fi |
| Max diff block lines reached; 49163/63970 bytes (76.85%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 21145, 194 lines modified | Offset 21145, 194 lines modified | ||
| 00052980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00052980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00052990:·6d31·3135·3837·2220·7461·6269·6e64·6578··m11587"·tabindex | 00052990:·6d31·3135·3837·2220·7461·6269·6e64·6578··m11587"·tabindex | ||
| 000529a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000529a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000529b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000529b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000529c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000529c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000529d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000529d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000529e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000529e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000529f0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 00052a00:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00052a10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00052a20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00052a30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00052a40:·6d31·3135·3837·223e·3c74·6162·6c65·2063··m11587"><table·c | |||
| 00052a50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00052a60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00052a70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00052a80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00052a90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00052aa0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00052ab0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00052ac0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00052ad0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00052ae0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00052af0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00052b00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00052b10:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | |||
| 00052b20:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00052b30:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00052b40:·3e2d·206e·616d·653a·2044·6973·6162·6c65··>-·name:·Disable | |||
| 00052b50:·2064·6562·7567·2d73·6865·6c6c·2053·7973···debug-shell·Sys | |||
| 00052b60:·7465·6d44·2053·6572·7669·6365·202d·2043··temD·Service·-·C | |||
| 00052b70:·6f6c·6c65·6374·2073·7973·7465·6d64·2053··ollect·systemd·S | |||
| 00052b80:·6572·7669·6365·7320·5072·6573·656e·7420··ervices·Present· | |||
| 00052b90:·696e·0a20·2020·2074·6865·2053·7973·7465··in.····the·Syste | |||
| 00052ba0:·6d0a·2020·616e·7369·626c·652e·6275·696c··m.··ansible.buil | |||
| 00052bb0:·7469·6e2e·636f·6d6d·616e·643a·2073·7973··tin.command:·sys | |||
| 00052bc0:·7465·6d63·746c·202d·7120·6c69·7374·2d75··temctl·-q·list-u | |||
| 00052bd0:·6e69·742d·6669·6c65·7320·2d2d·7479·7065··nit-files·--type | |||
| 00052be0:·2073·6572·7669·6365·0a20·2072·6567·6973···service.··regis | |||
| 00052bf0:·7465·723a·2073·6572·7669·6365·5f65·7869··ter:·service_exi | |||
| 00052c00:·7374·730a·2020·6368·616e·6765·645f·7768··sts.··changed_wh | |||
| 00052c10:·656e·3a20·6661·6c73·650a·2020·6661·696c··en:·false.··fail | |||
| 00052c20:·6564·5f77·6865·6e3a·2073·6572·7669·6365··ed_when:·service | |||
| 00052c30:·5f65·7869·7374·732e·7263·206e·6f74·2069··_exists.rc·not·i | |||
| 00052c40:·6e20·5b30·2c20·315d·0a20·2063·6865·636b··n·[0,·1].··check | |||
| 00052c50:·5f6d·6f64·653a·2066·616c·7365·0a20·2077··_mode:·false.··w | |||
| 00052c60:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00052c70:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00052c80:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00052c90:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00052ca0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00052cb0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00052cc0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 00052cd0:·3137·312d·332e·342e·350a·2020·2d20·4e49··171-3.4.5.··-·NI | |||
| 00052ce0:·5354·2d38·3030·2d35·332d·434d·2d36·0a20··ST-800-53-CM-6.· | |||
| 00052cf0:·202d·2064·6973·6162·6c65·5f73·7472·6174···-·disable_strat | |||
| 00052d00:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 00052d10:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00052d20:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00052d30:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00052d40:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00052d50:·6564·0a20·202d·2073·6572·7669·6365·5f64··ed.··-·service_d | |||
| 00052d60:·6562·7567·2d73·6865·6c6c·5f64·6973·6162··ebug-shell_disab | |||
| 00052d70:·6c65·640a·0a2d·206e·616d·653a·2044·6973··led..-·name:·Dis | |||
| 00052d80:·6162·6c65·2064·6562·7567·2d73·6865·6c6c··able·debug-shell | |||
| 00052d90:·2053·7973·7465·6d44·2053·6572·7669·6365···SystemD·Service | |||
| 00052da0:·202d·2045·6e73·7572·6520·6465·6275·672d···-·Ensure·debug- | |||
| 00052db0:·7368·656c·6c2e·7365·7276·6963·6520·6973··shell.service·is | |||
| 00052dc0:·204d·6173·6b65·640a·2020·616e·7369·626c···Masked.··ansibl | |||
| 00052dd0:·652e·6275·696c·7469·6e2e·7379·7374·656d··e.builtin.system | |||
| 00052de0:·643a·0a20·2020·206e·616d·653a·2064·6562··d:.····name:·deb | |||
| 00052df0:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 00052e00:·0a20·2020·2073·7461·7465·3a20·7374·6f70··.····state:·stop | |||
| 00052e10:·7065·640a·2020·2020·656e·6162·6c65·643a··ped.····enabled: | |||
| 00052e20:·2066·616c·7365·0a20·2020·206d·6173·6b65···false.····maske | |||
| 00052e30:·643a·2074·7275·650a·2020·7768·656e·3a0a··d:·true.··when:. | |||
| 00052e40:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 00052e50:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00052e60:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00052e70:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00052e80:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00052e90:·6e74·6169·6e65·7222·5d0a·2020·2d20·7365··ntainer"].··-·se | |||
| 00052ea0:·7276·6963·655f·6578·6973·7473·2e73·7464··rvice_exists.std | |||
| 00052eb0:·6f75·745f·6c69·6e65·7320·6973·2073·6561··out_lines·is·sea | |||
| 00052ec0:·7263·6828·2264·6562·7567·2d73·6865·6c6c··rch("debug-shell | |||
| 00052ed0:·2e73·6572·7669·6365·222c·206d·756c·7469··.service",·multi | |||
| 00052ee0:·6c69·6e65·3d54·7275·6529·0a20·2074·6167··line=True).··tag | |||
| 00052ef0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 00052f00:·3137·312d·332e·342e·350a·2020·2d20·4e49··171-3.4.5.··-·NI | |||
| 00052f10:·5354·2d38·3030·2d35·332d·434d·2d36·0a20··ST-800-53-CM-6.· | |||
| 00052f20:·202d·2064·6973·6162·6c65·5f73·7472·6174···-·disable_strat | |||
| 00052f30:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 00052f40:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00052f50:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00052f60:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00052f70:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00052f80:·6564·0a20·202d·2073·6572·7669·6365·5f64··ed.··-·service_d | |||
| 00052f90:·6562·7567·2d73·6865·6c6c·5f64·6973·6162··ebug-shell_disab | |||
| 00052fa0:·6c65·640a·0a2d·206e·616d·653a·2055·6e69··led..-·name:·Uni | |||
| 00052fb0:·7420·536f·636b·6574·2045·7869·7374·7320··t·Socket·Exists· | |||
| 00052fc0:·2d20·6465·6275·672d·7368·656c·6c2e·736f··-·debug-shell.so | |||
| 00052fd0:·636b·6574·0a20·2061·6e73·6962·6c65·2e62··cket.··ansible.b | |||
| 00052fe0:·7569·6c74·696e·2e63·6f6d·6d61·6e64·3a20··uiltin.command:· | |||
| 00052ff0:·7379·7374·656d·6374·6c20·2d71·206c·6973··systemctl·-q·lis | |||
| 00053000:·742d·756e·6974·2d66·696c·6573·2064·6562··t-unit-files·deb | |||
| 00053010:·7567·2d73·6865·6c6c·2e73·6f63·6b65·740a··ug-shell.socket. | |||
| 00053020:·2020·7265·6769·7374·6572·3a20·736f·636b····register:·sock | |||
| 00053030:·6574·5f66·696c·655f·6578·6973·7473·0a20··et_file_exists.· | |||
| 00053040:·2063·6861·6e67·6564·5f77·6865·6e3a·2066···changed_when:·f | |||
| 00053050:·616c·7365·0a20·2066·6169·6c65·645f·7768··alse.··failed_wh | |||
| 00053060:·656e·3a20·736f·636b·6574·5f66·696c·655f··en:·socket_file_ | |||
| Max diff block lines reached; 409260/435810 bytes (93.91%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:9 | 50 | ····*·cpe:/o:oracle:linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1315, 14 lines modified | Offset 1315, 18 lines modified | ||
| 1315 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1315 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1316 | ············_\x8c_\x8u_\x8i····3.4.5 | 1316 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1317 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1317 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1318 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1318 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1319 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1319 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1320 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1320 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1323 | [customizations.services] | ||
| 1324 | masked·=·["debug-shell"] | ||
| 1322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1323 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1324 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1325 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1326 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1327 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1330 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1328 | ····the·System | 1331 | ····the·System |
| Offset 1392, 18 lines modified | Offset 1396, 14 lines modified | ||
| 1392 | ··-·NIST-800-53-CM-6 | 1396 | ··-·NIST-800-53-CM-6 |
| 1393 | ··-·disable_strategy | 1397 | ··-·disable_strategy |
| 1394 | ··-·low_complexity | 1398 | ··-·low_complexity |
| 1395 | ··-·low_disruption | 1399 | ··-·low_disruption |
| 1396 | ··-·medium_severity | 1400 | ··-·medium_severity |
| 1397 | ··-·no_reboot_needed | 1401 | ··-·no_reboot_needed |
| 1398 | ··-·service_debug-shell_disabled | 1402 | ··-·service_debug-shell_disabled |
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1400 | [customizations.services] | ||
| 1401 | masked·=·["debug-shell"] | ||
| 1402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1403 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1404 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1405 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1406 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1407 | #·Remediation·is·applicable·only·in·certain·platforms | 1408 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1408 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1409 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1945, 38 lines modified | Offset 1945, 14 lines modified | ||
| 1945 | ··-·PCI-DSSv4-8.3.1 | 1945 | ··-·PCI-DSSv4-8.3.1 |
| 1946 | ··-·configure_strategy | 1946 | ··-·configure_strategy |
| 1947 | ··-·high_severity | 1947 | ··-·high_severity |
| 1948 | ··-·low_complexity | 1948 | ··-·low_complexity |
| 1949 | ··-·medium_disruption | 1949 | ··-·medium_disruption |
| 1950 | ··-·no_empty_passwords | 1950 | ··-·no_empty_passwords |
| 1951 | ··-·no_reboot_needed | 1951 | ··-·no_reboot_needed |
| 1952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1953 | --- | ||
| 1954 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1955 | kind:·MachineConfig | ||
| 1956 | spec: | ||
| 1957 | ··config: | ||
| 1958 | ····ignition: | ||
| 1959 | ······version:·3.1.0 | ||
| 1960 | ····storage: | ||
| 1961 | ······files: | ||
| 1962 | ······-·contents: | ||
| 1963 | ··········source: | ||
| 1964 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1965 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1966 | ········mode:·0644 | ||
| 1967 | ········path:·/etc/pam.d/password-auth | ||
| 1968 | ········overwrite:·true | ||
| 1969 | ······-·contents: | ||
| 1970 | ··········source: | ||
| 1971 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1972 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1973 | ········mode:·0644 | ||
| 1974 | ········path:·/etc/pam.d/system-auth | ||
| 1975 | ········overwrite:·true | ||
| 1976 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1952 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1977 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1953 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1978 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1954 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1979 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1955 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1980 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1956 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1981 | #·Remediation·is·applicable·only·in·certain·platforms | 1957 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1982 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1958 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2011, 14 lines modified | Offset 1987, 38 lines modified | ||
| 2011 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1987 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 2012 | fi | 1988 | fi |
| 2013 | fi | 1989 | fi |
| 2014 | else | 1990 | else |
| 2015 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1991 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2016 | fi | 1992 | fi |
| 1993 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1994 | --- | ||
| 1995 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1996 | kind:·MachineConfig | ||
| 1997 | spec: | ||
| 1998 | ··config: | ||
| 1999 | ····ignition: | ||
| 2000 | ······version:·3.1.0 | ||
| 2001 | ····storage: | ||
| 2002 | ······files: | ||
| 2003 | ······-·contents: | ||
| 2004 | ··········source: | ||
| 2005 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2006 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2007 | ········mode:·0644 | ||
| 2008 | ········path:·/etc/pam.d/password-auth | ||
| 2009 | ········overwrite:·true | ||
| 2010 | ······-·contents: | ||
| 2011 | ··········source: | ||
| 2012 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2013 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2014 | ········mode:·0644 | ||
| 2015 | ········path:·/etc/pam.d/system-auth | ||
| 2016 | ········overwrite:·true | ||
| 2017 | Group ·Restrict·Root·Logins· Group·contains·3·rules | 2017 | Group ·Restrict·Root·Logins· Group·contains·3·rules |
| 2018 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. | 2018 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Direct·root·logins·should·be·allowed·only·for·emergency·use.·In·normal·situations,·the·administrator·should·access·the·system·via·a·unique·unprivileged·account,·and·then·use·su·or·sudo·to·execute·privileged·commands.·Discouraging·administrators·from·accessing·the·root·account·directly·ensures·an·audit·trail·in·organizations·with·multiple·administrators.·Locking·down·the·channels·through·which·root·can·connect·directly·also·reduces·opportunities·for·password-guessing·against·the·root·account.·The·login·program·uses·the·file·/etc/securetty·to·determine·which·interfaces·should·allow·root·logins.·The·virtual·devices·/dev/console·and·/dev/tty*·represent·the·system·consoles·(accessible·via·the·Ctrl-Alt-F1·through·Ctrl-Alt-F6·keyboard·sequences·on·a·default·installation).·The·default·securetty·file·also·contains·/dev/vc/*.·These·are·likely·to·be·deprecated·in·most·environments,·but·may·be·retained·for·compatibility.·Root·should·also·be·prohibited·from·connecting·via·network·protocols.·Other·sections·of·this·document·include·guidance·describing·how·to·prevent·root·from·logging·in·via·SSH. |
| 2019 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2019 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8ir\x8re\x8ec\x8ct\x8t·r\x8ro\x8oo\x8ot\x8t·L\x8Lo\x8og\x8gi\x8in\x8ns\x8s·N\x8No\x8ot\x8t·A\x8Al\x8ll\x8lo\x8ow\x8we\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 30579/53696 bytes (56.95%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·2861·7320·6f66·2032·3032·3 | 00037e10:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e20:·3 | 00037e20:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15464, 256 lines modified | Offset 15464, 256 lines modified | ||
| 0003c670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c680:·743d·2223·6964·6d35·3736·3222·2074·6162··t="#idm5762"·tab | 0003c680:·743d·2223·6964·6d35·3736·3222·2074·6162··t="#idm5762"·tab | ||
| 0003c690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c6e0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c6e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c6f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c700:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c710:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c720:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c730:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c740:·3537·3632·223e·3c70·7265·3e3c·636f·6465··5762"><pre><code | |||
| 0003c750:·3e0a·5b63·7573·746f·6d69·7a61·7469·6f6e··>.[customization | |||
| 0003c760:·735d·0a66·6970·7320·3d20·7472·7565·0a3c··s].fips·=·true.< | |||
| 0003c770:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c780:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c790:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c7a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c7b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c7c0:·2223·6964·6d35·3736·3322·2074·6162·696e··"#idm5763"·tabin | |||
| 0003c7d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c7e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c7f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c800:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c810:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c820:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003c | 0003c830:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003c | 0003c840:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c | 0003c850:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c | 0003c860:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c | 0003c870:·2269·646d·3537·3633·223e·3c74·6162·6c65··"idm5763"><table | ||
| 0003c | 0003c880:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003c | 0003c890:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003c | 0003c8a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003c | 0003c8b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003c | 0003c8c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003c | 0003c8d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003c8e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c8f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c900:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 0003c910:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c920:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 0003c | 0003c930:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c7b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c7c0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0003c7d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c7e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | |||
| 0003c7f0:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | |||
| 0003c | 0003c940:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c | 0003c950:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003c | 0003c960:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003c | 0003c970:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003c | 0003c980:·2058·4343·4446·2056·616c·7565·2076·6172···XCCDF·Value·var | ||
| 0003c | 0003c990:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003c | 0003c9a0:·6f6c·6963·7920·2320·7072·6f6d·6f74·6520··olicy·#·promote· | ||
| 0003c | 0003c9b0:·746f·2076·6172·6961·626c·650a·2020·7365··to·variable.··se | ||
| 0003c | 0003c9c0:·745f·6661·6374·3a0a·2020·2020·7661·725f··t_fact:.····var_ | ||
| 0003c | 0003c9d0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003c | 0003c9e0:·6c69·6379·3a20·2121·7374·7220·3c61·6262··licy:·!!str·<abb | ||
| 0003c | 0003c9f0:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | ||
| 0003c | 0003ca00:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | ||
| 0003c | 0003ca10:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | ||
| 0003c | 0003ca20:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 0003c | 0003ca30:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 0003c | 0003ca40:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 0003c | 0003ca50:·3e46·4950·533a·4f53·5050·3c2f·6162·6272··>FIPS:OSPP</abbr | ||
| 0003c | 0003ca60:·3e0a·2020·7461·6773·3a0a·2020·2020·2d20··>.··tags:.····-· | ||
| 0003c | 0003ca70:·616c·7761·7973·0a0a·2d20·6e61·6d65·3a20··always..-·name:· | ||
| 0003ca80:·456e·6162·6c65·2046·4950·5320·4d6f·6465··Enable·FIPS·Mode | |||
| 0003ca90:·202d·2043·6865·636b·2074·6f20·5365·6520···-·Check·to·See· | |||
| 0003caa0:·7468·6520·4375·7272·656e·7420·5374·6174··the·Current·Stat | |||
| 0003cab0:·7573·206f·6620·4649·5053·204d·6f64·650a··us·of·FIPS·Mode. | |||
| 0003cac0:·2020·616e·7369·626c·652e·6275·696c·7469····ansible.builti | |||
| 0003cad0:·6e2e·636f·6d6d·616e·643a·202f·7573·722f··n.command:·/usr/ | |||
| 0003cae0:·6269·6e2f·6669·7073·2d6d·6f64·652d·7365··bin/fips-mode-se | |||
| 0003caf0:·7475·7020·2d2d·6368·6563·6b0a·2020·7265··tup·--check.··re | |||
| 0003cb00:·6769·7374·6572·3a20·6973·5f66·6970·735f··gister:·is_fips_ | |||
| 0003cb10:·656e·6162·6c65·640a·2020·6661·696c·6564··enabled.··failed | |||
| 0003cb20:·5f77·6865·6e3a·2066·616c·7365·0a20·2063··_when:·false.··c | |||
| 0003cb30:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0003cb40:·7365·0a20·2077·6865·6e3a·0a20·202d·2028··se.··when:.··-·( | |||
| 0003cb50:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003cb60:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003cb70:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003cb80:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003cb90:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003cba0:·696e·6572·225d·0a20·2020·2061·6e64·206e··iner"].····and·n | |||
| 0003cbb0:·6f74·2028·206c·6f6f·6b75·7028·2265·6e76··ot·(·lookup("env | |||
| 0003cbc0:·222c·2022·636f·6e74·6169·6e65·7222·2920··",·"container")· | |||
| 0003cbd0:·3d3d·2022·6277·7261·702d·6f73·6275·696c··==·"bwrap-osbuil | |||
| 0003cbe0:·6422·2029·2029·0a20·202d·2061·6e73·6962··d"·)·).··-·ansib | |||
| 0003cbf0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003cc00:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003cc10:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003cc20:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003cc30:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003cc40:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003cc50:·542d·3830·302d·3533·2d43·4d2d·3328·3629··T-800-53-CM-3(6) | |||
| 0003cc60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003cc70:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003cc80:·542d·3830·302d·3533·2d49·412d·370a·2020··T-800-53-IA-7.·· | |||
| 0003cc90:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003cca0:·2d31·320a·2020·2d20·4e49·5354·2d38·3030··-12.··-·NIST-800 | |||
| 0003ccb0:·2d35·332d·5343·2d31·3228·3229·0a20·202d··-53-SC-12(2).··- | |||
| 0003ccc0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003ccd0:·3132·2833·290a·2020·2d20·4e49·5354·2d38··12(3).··-·NIST-8 | |||
| 0003cce0:·3030·2d35·332d·5343·2d31·330a·2020·2d20··00-53-SC-13.··-· | |||
| 0003ccf0:·656e·6162·6c65·5f66·6970·735f·6d6f·6465··enable_fips_mode | |||
| Max diff block lines reached; 1012536/1047780 bytes (96.64%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 187, 14 lines modified | Offset 187, 18 lines modified | ||
| 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 189 | ············_\x8i_\x8s_\x8m······1446 | 189 | ············_\x8i_\x8s_\x8m······1446 |
| 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [customizations] | ||
| 196 | fips·=·true | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 199 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 202 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 200 | ··set_fact: | 203 | ··set_fact: |
| Offset 290, 18 lines modified | Offset 294, 14 lines modified | ||
| 290 | ··-·NIST-800-53-SC-13 | 294 | ··-·NIST-800-53-SC-13 |
| 291 | ··-·enable_fips_mode | 295 | ··-·enable_fips_mode |
| 292 | ··-·high_severity | 296 | ··-·high_severity |
| 293 | ··-·medium_complexity | 297 | ··-·medium_complexity |
| 294 | ··-·medium_disruption | 298 | ··-·medium_disruption |
| 295 | ··-·reboot_required | 299 | ··-·reboot_required |
| 296 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 298 | [customizations] | ||
| 299 | fips·=·true | ||
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 301 | #·Remediation·is·applicable·only·in·certain·platforms | 302 | #·Remediation·is·applicable·only·in·certain·platforms |
| 302 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 303 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 303 | var_system_crypto_policy='FIPS:OSPP' | 304 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 339, 14 lines modified | Offset 339, 26 lines modified | ||
| 339 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 339 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 340 | $·sudo·yum·install·crypto-policies | 340 | $·sudo·yum·install·crypto-policies |
| 341 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 341 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 342 | Severity: ··medium | 342 | Severity: ··medium |
| 343 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 343 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 344 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 344 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 347 | [[packages]] | ||
| 348 | name·=·"crypto-policies" | ||
| 349 | version·=·"*" | ||
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 355 | package·--add=crypto-policies | ||
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 351 | -·name:·Ensure·crypto-policies·is·installed | 361 | -·name:·Ensure·crypto-policies·is·installed |
| 352 | ··package: | 362 | ··package: |
| Offset 355, 19 lines modified | Offset 367, 14 lines modified | ||
| 355 | ··tags: | 367 | ··tags: |
| 356 | ··-·enable_strategy | 368 | ··-·enable_strategy |
| 357 | ··-·low_complexity | 369 | ··-·low_complexity |
| 358 | ··-·low_disruption | 370 | ··-·low_disruption |
| 359 | ··-·medium_severity | 371 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 372 | ··-·no_reboot_needed |
| 361 | ··-·package_crypto-policies_installed | 373 | ··-·package_crypto-policies_installed |
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 363 | [[packages]] | ||
| 364 | name·=·"crypto-policies" | ||
| 365 | version·=·"*" | ||
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 371 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 379 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 381, 21 lines modified | Offset 388, 14 lines modified | ||
| 381 | include·install_crypto-policies | 388 | include·install_crypto-policies |
| 382 | class·install_crypto-policies·{ | 389 | class·install_crypto-policies·{ |
| 383 | ··package·{·'crypto-policies': | 390 | ··package·{·'crypto-policies': |
| 384 | ····ensure·=>·'installed', | 391 | ····ensure·=>·'installed', |
| 385 | ··} | 392 | ··} |
| 386 | } | 393 | } |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 392 | package·--add=crypto-policies | ||
| 393 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 394 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 394 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 395 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 395 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 396 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 396 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 397 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 397 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 398 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 398 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 399 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 399 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 400 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 704, 14 lines modified | Offset 704, 26 lines modified | ||
| 704 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 704 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 705 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 705 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 706 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 706 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 707 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 707 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| Max diff block lines reached; 118504/126627 bytes (93.59%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16376, 201 lines modified | Offset 16376, 201 lines modified | ||
| 0003ff70:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ff70:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ff80:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ff80:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ff90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ff90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ffa0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ffa0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ffb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ffb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ffc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ffc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ffd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ffd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ffe0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003fff0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ffe0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003fff0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040000:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040010:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040020:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 00040030:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 00040040:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040050:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040060:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040070:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040080:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040090:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000400a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 000400b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000400c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000400d0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 000400e0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 000400f0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040100:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040110:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040120:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00040130:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 00040140:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00040150:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00040160:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 00040170:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 00040180:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00040190:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000401a0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000401b0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000401c0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000401d0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 000401e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 000401f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00040200:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00040210:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00040220:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00040230:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040240:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040250:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040260:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040270:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040280:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040290:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 000402a0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 000402b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000402c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000402d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000402e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000402f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00040300:·743d·2223·6964·6d35·3232·3322·2074·6162··t="#idm5223"·tab | |||
| 00040310:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00040320:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00040330:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040340:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040350:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040360:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 00040370:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 00040380:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00040390:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000403a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000403b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000403c0:·3532·3233·223e·3c70·7265·3e3c·636f·6465··5223"><pre><code | |||
| 000403d0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 000403e0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 000403f0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00040400:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040410:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040420:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040430:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040440:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040450:·6d35·3232·3422·2074·6162·696e·6465·783d··m5224"·tabindex= | |||
| 00040460:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040470:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040480:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040490:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 000404a0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 000404b0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 000404c0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 000404d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000404e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000404f0:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 00040500:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 00040510:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040520:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040530:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040540:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040550:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040560:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040570:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040580:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040590:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000405a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 000405b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 000405c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000405d0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 000405e0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000405f0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 00040600:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 00040610:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 00040620:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 00040630:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| Max diff block lines reached; 612879/640395 bytes (95.70%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 408, 14 lines modified | Offset 408, 26 lines modified | ||
| 408 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 408 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 409 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 409 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 413 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 413 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 414 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 414 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 416 | [[packages]] | ||
| 417 | name·=·"aide" | ||
| 418 | version·=·"*" | ||
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 424 | package·--add=aide | ||
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 420 | -·name:·Ensure·aide·is·installed | 430 | -·name:·Ensure·aide·is·installed |
| 421 | ··package: | 431 | ··package: |
| Offset 429, 19 lines modified | Offset 441, 14 lines modified | ||
| 429 | ··-·PCI-DSSv4-11.5.2 | 441 | ··-·PCI-DSSv4-11.5.2 |
| 430 | ··-·enable_strategy | 442 | ··-·enable_strategy |
| 431 | ··-·low_complexity | 443 | ··-·low_complexity |
| 432 | ··-·low_disruption | 444 | ··-·low_disruption |
| 433 | ··-·medium_severity | 445 | ··-·medium_severity |
| 434 | ··-·no_reboot_needed | 446 | ··-·no_reboot_needed |
| 435 | ··-·package_aide_installed | 447 | ··-·package_aide_installed |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | [[packages]] | ||
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 445 | #·Remediation·is·applicable·only·in·certain·platforms | 453 | #·Remediation·is·applicable·only·in·certain·platforms |
| 446 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 454 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 461, 21 lines modified | Offset 468, 14 lines modified | ||
| 461 | include·install_aide | 468 | include·install_aide |
| 462 | class·install_aide·{ | 469 | class·install_aide·{ |
| 463 | ··package·{·'aide': | 470 | ··package·{·'aide': |
| 464 | ····ensure·=>·'installed', | 471 | ····ensure·=>·'installed', |
| 465 | ··} | 472 | ··} |
| 466 | } | 473 | } |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 472 | package·--add=aide | ||
| 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 474 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 474 | Run·the·following·command·to·generate·a·new·database: | 475 | Run·the·following·command·to·generate·a·new·database: |
| 475 | $·sudo·/usr/sbin/aide·--init | 476 | $·sudo·/usr/sbin/aide·--init |
| 476 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 477 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 477 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 478 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 478 | To·initiate·a·manual·check,·run·the·following·command: | 479 | To·initiate·a·manual·check,·run·the·following·command: |
| 479 | $·sudo·/usr/sbin/aide·--check | 480 | $·sudo·/usr/sbin/aide·--check |
| Offset 2374, 14 lines modified | Offset 2374, 26 lines modified | ||
| 2374 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 2374 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 2375 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2375 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2376 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2376 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2377 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2377 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2378 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2378 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2379 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2379 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2380 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2380 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2382 | [[packages]] | ||
| 2383 | name·=·"sudo" | ||
| 2384 | version·=·"*" | ||
| 2385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2390 | package·--add=sudo | ||
| 2381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2386 | -·name:·Ensure·sudo·is·installed | 2396 | -·name:·Ensure·sudo·is·installed |
| 2387 | ··package: | 2397 | ··package: |
| Offset 2393, 19 lines modified | Offset 2405, 14 lines modified | ||
| 2393 | ··-·PCI-DSSv4-2.2.6 | 2405 | ··-·PCI-DSSv4-2.2.6 |
| 2394 | ··-·enable_strategy | 2406 | ··-·enable_strategy |
| 2395 | ··-·low_complexity | 2407 | ··-·low_complexity |
| 2396 | ··-·low_disruption | 2408 | ··-·low_disruption |
| 2397 | ··-·medium_severity | 2409 | ··-·medium_severity |
| 2398 | ··-·no_reboot_needed | 2410 | ··-·no_reboot_needed |
| 2399 | ··-·package_sudo_installed | 2411 | ··-·package_sudo_installed |
| 2400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2401 | [[packages]] | ||
| 2402 | name·=·"sudo" | ||
| 2403 | version·=·"*" | ||
| 2404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2413 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2414 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 71525/77427 bytes (92.38%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d40:·2d31·3 | 00037d40:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 21310, 692 lines modified | Offset 21310, 692 lines modified | ||
| 000533d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000533d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000533e0:·2369·646d·3134·3030·3622·2074·6162·696e··#idm14006"·tabin | 000533e0:·2369·646d·3134·3030·3622·2074·6162·696e··#idm14006"·tabin | ||
| 000533f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 000533f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00053400:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00053400:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00053410:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00053410:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00053420:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00053420:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00053430:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00053430:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00053440:·3e52·656d·6564·6961·7469·6f6e·20 | 00053440:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 00053450:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 00053460:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000534 | 00053450:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 00053460:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00053470:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00053480:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00053490:·6d31·3430·3036·223e·3c74·6162·6c65·2063··m14006"><table·c | |||
| 000534a0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000534b0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000534c0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000534d0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000534e0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000534f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00053500:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00053510:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 00053520:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 00053530:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00053540:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00053550:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00053560:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00053570:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| 00053580:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00053590:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 000535a0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 000535b0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 000535c0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 000535d0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 000535e0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 000535f0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 00053600:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 00053610:·0a0a·6966·205b·202d·6620·2f75·7372·2f62··..if·[·-f·/usr/b | |||
| 00053620:·696e·2f61·7574·6873·656c·6563·7420·5d3b··in/authselect·]; | |||
| 00053630:·2074·6865·6e0a·2020·2020·6966·2021·2061···then.····if·!·a | |||
| 00053640:·7574·6873·656c·6563·7420·6368·6563·6b3b··uthselect·check; | |||
| 00053650:·2074·6865·6e0a·6563·686f·2022·0a61·7574···then.echo·".aut | |||
| 00053660:·6873·656c·6563·7420·696e·7465·6772·6974··hselect·integrit | |||
| 00053670:·7920·6368·6563·6b20·6661·696c·6564·2e20··y·check·failed.· | |||
| 00053680:·5265·6d65·6469·6174·696f·6e20·6162·6f72··Remediation·abor | |||
| 00053690:·7465·6421·0a54·6869·7320·7265·6d65·6469··ted!.This·remedi | |||
| 000536a0:·6174·696f·6e20·636f·756c·6420·6e6f·7420··ation·could·not· | |||
| 000536b0:·6265·2061·7070·6c69·6564·2062·6563·6175··be·applied·becau | |||
| 000536c0:·7365·2061·6e20·6175·7468·7365·6c65·6374··se·an·authselect | |||
| 000536d0:·2070·726f·6669·6c65·2077·6173·206e·6f74···profile·was·not | |||
| 000536e0:·2073·656c·6563·7465·6420·6f72·2074·6865···selected·or·the | |||
| 000536f0:·2073·656c·6563·7465·6420·7072·6f66·696c···selected·profil | |||
| 00053700:·6520·6973·206e·6f74·2069·6e74·6163·742e··e·is·not·intact. | |||
| 00053710:·0a49·7420·6973·206e·6f74·2072·6563·6f6d··.It·is·not·recom | |||
| 00053720:·6d65·6e64·6564·2074·6f20·6d61·6e75·616c··mended·to·manual | |||
| 00053730:·6c79·2065·6469·7420·7468·6520·5041·4d20··ly·edit·the·PAM· | |||
| 00053740:·6669·6c65·7320·7768·656e·2061·7574·6873··files·when·auths | |||
| 00053750:·656c·6563·7420·746f·6f6c·2069·7320·6176··elect·tool·is·av | |||
| 00053760:·6169·6c61·626c·652e·0a49·6e20·6361·7365··ailable..In·case | |||
| 00053770:·7320·7768·6572·6520·7468·6520·6465·6661··s·where·the·defa | |||
| 00053780:·756c·7420·6175·7468·7365·6c65·6374·2070··ult·authselect·p | |||
| 00053790:·726f·6669·6c65·2064·6f65·7320·6e6f·7420··rofile·does·not· | |||
| 000537a0:·636f·7665·7220·6120·7370·6563·6966·6963··cover·a·specific | |||
| 000537b0:·2064·656d·616e·642c·2061·2063·7573·746f···demand,·a·custo | |||
| 000537c0:·6d20·6175·7468·7365·6c65·6374·2070·726f··m·authselect·pro | |||
| 000537d0:·6669·6c65·2069·7320·7265·636f·6d6d·656e··file·is·recommen | |||
| 000537e0:·6465·642e·220a·6578·6974·2031·0a66·690a··ded.".exit·1.fi. | |||
| 000537f0:·6175·7468·7365·6c65·6374·2065·6e61·626c··authselect·enabl | |||
| 00053800:·652d·6665·6174·7572·6520·7769·7468·6f75··e-feature·withou | |||
| 00053810:·742d·6e75·6c6c·6f6b·0a0a·6175·7468·7365··t-nullok..authse | |||
| 00053820:·6c65·6374·2061·7070·6c79·2d63·6861·6e67··lect·apply-chang | |||
| 00053830:·6573·202d·620a·656c·7365·0a20·2020·200a··es·-b.else.····. | |||
| 00053840:·6966·2067·7265·7020·2d71·5020·225e·5c73··if·grep·-qP·"^\s | |||
| 00053850:·2a61·7574·685c·732b·7375·6666·6963·6965··*auth\s+sufficie | |||
| 00053860:·6e74·5c73·2b70·616d·5f75·6e69·782e·736f··nt\s+pam_unix.so | |||
| 00053870:·5c73·2e2a·5c62·6e75·6c6c·6f6b·5c62·2220··\s.*\bnullok\b"· | |||
| 00053880:·222f·6574·632f·7061·6d2e·642f·7379·7374··"/etc/pam.d/syst | |||
| 00053890:·656d·2d61·7574·6822·3b20·7468·656e·0a20··em-auth";·then.· | |||
| 000538a0:·2020·2073·6564·202d·6920·2d45·202d·2d66·····sed·-i·-E·--f | |||
| 000538b0:·6f6c·6c6f·772d·7379·6d6c·696e·6b73·2022··ollow-symlinks·" | |||
| 000538c0:·732f·282e·2a61·7574·682e·2a73·7566·6669··s/(.*auth.*suffi | |||
| 000538d0:·6369·656e·742e·2a70·616d·5f75·6e69·782e··cient.*pam_unix. | |||
| 000538e0:·736f·2e2a·295c·736e·756c·6c6f·6b3d·3f5b··so.*)\snullok=?[ | |||
| 000538f0:·5b3a·616c·6e75·6d3a·5d5d·2a28·2e2a·292f··[:alnum:]]*(.*)/ | |||
| 00053900:·5c31·5c32·2f67·2220·222f·6574·632f·7061··\1\2/g"·"/etc/pa | |||
| 00053910:·6d2e·642f·7379·7374·656d·2d61·7574·6822··m.d/system-auth" | |||
| 00053920:·0a66·690a·2020·2020·0a69·6620·6772·6570··.fi.····.if·grep | |||
| 00053930:·202d·7150·2022·5e5c·732a·7061·7373·776f···-qP·"^\s*passwo | |||
| 00053940:·7264·5c73·2b73·7566·6669·6369·656e·745c··rd\s+sufficient\ | |||
| 00053950:·732b·7061·6d5f·756e·6978·2e73·6f5c·732e··s+pam_unix.so\s. | |||
| 00053960:·2a5c·626e·756c·6c6f·6b5c·6222·2022·2f65··*\bnullok\b"·"/e | |||
| 00053970:·7463·2f70·616d·2e64·2f73·7973·7465·6d2d··tc/pam.d/system- | |||
| 00053980:·6175·7468·223b·2074·6865·6e0a·2020·2020··auth";·then.···· | |||
| 00053990:·7365·6420·2d69·202d·4520·2d2d·666f·6c6c··sed·-i·-E·--foll | |||
| 000539a0:·6f77·2d73·796d·6c69·6e6b·7320·2273·2f28··ow-symlinks·"s/( | |||
| 000539b0:·2e2a·7061·7373·776f·7264·2e2a·7375·6666··.*password.*suff | |||
| 000539c0:·6963·6965·6e74·2e2a·7061·6d5f·756e·6978··icient.*pam_unix | |||
| 000539d0:·2e73·6f2e·2a29·5c73·6e75·6c6c·6f6b·3d3f··.so.*)\snullok=? | |||
| 000539e0:·5b5b·3a61·6c6e·756d·3a5d·5d2a·282e·2a29··[[:alnum:]]*(.*) | |||
| 000539f0:·2f5c·315c·322f·6722·2022·2f65·7463·2f70··/\1\2/g"·"/etc/p | |||
| 00053a00:·616d·2e64·2f73·7973·7465·6d2d·6175·7468··am.d/system-auth | |||
| 00053a10:·220a·6669·0a20·2020·200a·6966·2067·7265··".fi.····.if·gre | |||
| 00053a20:·7020·2d71·5020·225e·5c73·2a61·7574·685c··p·-qP·"^\s*auth\ | |||
| 00053a30:·732b·7375·6666·6963·6965·6e74·5c73·2b70··s+sufficient\s+p | |||
| 00053a40:·616d·5f75·6e69·782e·736f·5c73·2e2a·5c62··am_unix.so\s.*\b | |||
| 00053a50:·6e75·6c6c·6f6b·5c62·2220·222f·6574·632f··nullok\b"·"/etc/ | |||
| 00053a60:·7061·6d2e·642f·7061·7373·776f·7264·2d61··pam.d/password-a | |||
| 00053a70:·7574·6822·3b20·7468·656e·0a20·2020·2073··uth";·then.····s | |||
| 00053a80:·6564·202d·6920·2d45·202d·2d66·6f6c·6c6f··ed·-i·-E·--follo | |||
| Max diff block lines reached; 290395/322327 bytes (90.09%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:9 | 42 | ····*·cpe:/o:oracle:linux:9 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1218, 38 lines modified | Offset 1218, 14 lines modified | ||
| 1218 | ··-·PCI-DSSv4-8.3.1 | 1218 | ··-·PCI-DSSv4-8.3.1 |
| 1219 | ··-·configure_strategy | 1219 | ··-·configure_strategy |
| 1220 | ··-·high_severity | 1220 | ··-·high_severity |
| 1221 | ··-·low_complexity | 1221 | ··-·low_complexity |
| 1222 | ··-·medium_disruption | 1222 | ··-·medium_disruption |
| 1223 | ··-·no_empty_passwords | 1223 | ··-·no_empty_passwords |
| 1224 | ··-·no_reboot_needed | 1224 | ··-·no_reboot_needed |
| 1225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1226 | --- | ||
| 1227 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1228 | kind:·MachineConfig | ||
| 1229 | spec: | ||
| 1230 | ··config: | ||
| 1231 | ····ignition: | ||
| 1232 | ······version:·3.1.0 | ||
| 1233 | ····storage: | ||
| 1234 | ······files: | ||
| 1235 | ······-·contents: | ||
| 1236 | ··········source: | ||
| 1237 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1238 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1239 | ········mode:·0644 | ||
| 1240 | ········path:·/etc/pam.d/password-auth | ||
| 1241 | ········overwrite:·true | ||
| 1242 | ······-·contents: | ||
| 1243 | ··········source: | ||
| 1244 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1245 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1246 | ········mode:·0644 | ||
| 1247 | ········path:·/etc/pam.d/system-auth | ||
| 1248 | ········overwrite:·true | ||
| 1249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1250 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1251 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1252 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1253 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1254 | #·Remediation·is·applicable·only·in·certain·platforms | 1230 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1255 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1231 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1284, 14 lines modified | Offset 1260, 38 lines modified | ||
| 1284 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1260 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1285 | fi | 1261 | fi |
| 1286 | fi | 1262 | fi |
| 1287 | else | 1263 | else |
| 1288 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1264 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1289 | fi | 1265 | fi |
| 1266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1267 | --- | ||
| 1268 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1269 | kind:·MachineConfig | ||
| 1270 | spec: | ||
| 1271 | ··config: | ||
| 1272 | ····ignition: | ||
| 1273 | ······version:·3.1.0 | ||
| 1274 | ····storage: | ||
| 1275 | ······files: | ||
| 1276 | ······-·contents: | ||
| 1277 | ··········source: | ||
| 1278 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1279 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1280 | ········mode:·0644 | ||
| 1281 | ········path:·/etc/pam.d/password-auth | ||
| 1282 | ········overwrite:·true | ||
| 1283 | ······-·contents: | ||
| 1284 | ··········source: | ||
| 1285 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1286 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1287 | ········mode:·0644 | ||
| 1288 | ········path:·/etc/pam.d/system-auth | ||
| 1289 | ········overwrite:·true | ||
| 1290 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 1290 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 1291 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 1291 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 1292 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 1292 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 1293 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 1293 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 1294 | #·echo·$PATH | 1294 | #·echo·$PATH |
| 1295 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 1295 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1387, 14 lines modified | Offset 1387, 26 lines modified | ||
| 1387 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 1387 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 1388 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1388 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1389 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1389 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1390 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1390 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1391 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1391 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1392 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1392 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1395 | [[packages]] | ||
| 1396 | name·=·"rsyslog" | ||
| 1397 | version·=·"*" | ||
| 1398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1399 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1400 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1401 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1402 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1403 | package·--add=rsyslog | ||
| 1394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1407 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1408 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1399 | -·name:·Ensure·rsyslog·is·installed | 1409 | -·name:·Ensure·rsyslog·is·installed |
| 1400 | ··package: | 1410 | ··package: |
| Offset 1405, 19 lines modified | Offset 1417, 14 lines modified | ||
| 1405 | ··-·NIST-800-53-CM-6(a) | 1417 | ··-·NIST-800-53-CM-6(a) |
| 1406 | ··-·enable_strategy | 1418 | ··-·enable_strategy |
| 1407 | ··-·low_complexity | 1419 | ··-·low_complexity |
| 1408 | ··-·low_disruption | 1420 | ··-·low_disruption |
| 1409 | ··-·medium_severity | 1421 | ··-·medium_severity |
| 1410 | ··-·no_reboot_needed | 1422 | ··-·no_reboot_needed |
| Max diff block lines reached; 19773/41409 bytes (47.75%) of diff not shown. | |||
| Offset 14279, 16 lines modified | Offset 14279, 16 lines modified | ||
| 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037cd0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037cd0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037ce0:·2d31·3 | 00037ce0:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15061, 200 lines modified | Offset 15061, 200 lines modified | ||
| 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | ||
| 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003adb0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003adc0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003adb0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003adc0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003add0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ade0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003adf0:·7073·6522·2069·643d·2269·646d·3532·3232··pse"·id="idm5222 | |||
| 0003ae00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ae20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ae30:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ae40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ae70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ae80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003aea0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003aeb0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003aec0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003aed0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003aee0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003aef0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af00:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af10:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003af20:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003af30:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003af40:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003af50:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003af60:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003af70:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003af80:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003af90:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003afa0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003afb0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003afc0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003afd0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afe0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003aff0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b000:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b010:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b020:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b030:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b040:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b050:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b060:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b070:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b080:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b090:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b0a0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b0b0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b0c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b0d0:·3d22·2369·646d·3532·3233·2220·7461·6269··="#idm5223"·tabi | |||
| 0003b0e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b0f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b100:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b110:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b120:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b130:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b140:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b150:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b160:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b170:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b180:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b190:·3232·3322·3e3c·7072·653e·3c63·6f64·653e··223"><pre><code> | |||
| 0003b1a0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b1b0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b1c0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b1d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b1e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b1f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b200:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b210:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b220:·3532·3234·2220·7461·6269·6e64·6578·3d22··5224"·tabindex=" | |||
| 0003b230:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b240:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b250:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b260:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b270:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b280:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b290:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b2a0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2b0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2c0:·7073·6522·2069·643d·2269·646d·3532·3234··pse"·id="idm5224 | |||
| 0003b2d0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b2e0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b2f0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b300:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b310:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b320:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b330:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b340:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b350:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b360:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b370:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b380:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b390:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b3a0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b3c0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b3d0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b3e0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b3f0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| Max diff block lines reached; 2468946/2496462 bytes (98.90%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Oracle·Linux·9 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Oracle·Linux·9 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:9 | 41 | ····*·cpe:/o:oracle:linux:9 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 98, 14 lines modified | Offset 98, 26 lines modified | ||
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 103 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 103 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 106 | [[packages]] | ||
| 107 | name·=·"aide" | ||
| 108 | version·=·"*" | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 114 | package·--add=aide | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 110 | -·name:·Ensure·aide·is·installed | 120 | -·name:·Ensure·aide·is·installed |
| 111 | ··package: | 121 | ··package: |
| Offset 119, 19 lines modified | Offset 131, 14 lines modified | ||
| 119 | ··-·PCI-DSSv4-11.5.2 | 131 | ··-·PCI-DSSv4-11.5.2 |
| 120 | ··-·enable_strategy | 132 | ··-·enable_strategy |
| 121 | ··-·low_complexity | 133 | ··-·low_complexity |
| 122 | ··-·low_disruption | 134 | ··-·low_disruption |
| 123 | ··-·medium_severity | 135 | ··-·medium_severity |
| 124 | ··-·no_reboot_needed | 136 | ··-·no_reboot_needed |
| 125 | ··-·package_aide_installed | 137 | ··-·package_aide_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | 143 | #·Remediation·is·applicable·only·in·certain·platforms |
| 136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 151, 21 lines modified | Offset 158, 14 lines modified | ||
| 151 | include·install_aide | 158 | include·install_aide |
| 152 | class·install_aide·{ | 159 | class·install_aide·{ |
| 153 | ··package·{·'aide': | 160 | ··package·{·'aide': |
| 154 | ····ensure·=>·'installed', | 161 | ····ensure·=>·'installed', |
| 155 | ··} | 162 | ··} |
| 156 | } | 163 | } |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 164 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 165 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 165 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 166 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 166 | Severity: ··medium | 167 | Severity: ··medium |
| 167 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 168 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 168 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 169 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 169 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 170 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1690, 14 lines modified | Offset 1690, 18 lines modified | ||
| 1690 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1690 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1692 | ············_\x8i_\x8s_\x8m······1446 | 1692 | ············_\x8i_\x8s_\x8m······1446 |
| 1693 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1693 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1694 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1694 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1695 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1695 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1696 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1696 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1698 | [customizations] | ||
| 1699 | fips·=·true | ||
| 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1700 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1698 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1701 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1699 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1702 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1700 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1703 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1701 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1704 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1702 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1705 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1703 | ··set_fact: | 1706 | ··set_fact: |
| Offset 1793, 18 lines modified | Offset 1797, 14 lines modified | ||
| 1793 | ··-·NIST-800-53-SC-13 | 1797 | ··-·NIST-800-53-SC-13 |
| 1794 | ··-·enable_fips_mode | 1798 | ··-·enable_fips_mode |
| 1795 | ··-·high_severity | 1799 | ··-·high_severity |
| 1796 | ··-·medium_complexity | 1800 | ··-·medium_complexity |
| 1797 | ··-·medium_disruption | 1801 | ··-·medium_disruption |
| 1798 | ··-·reboot_required | 1802 | ··-·reboot_required |
| 1799 | ··-·restrict_strategy | 1803 | ··-·restrict_strategy |
| 1800 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1801 | [customizations] | ||
| 1802 | fips·=·true | ||
| 1803 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1804 | #·Remediation·is·applicable·only·in·certain·platforms | 1805 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1805 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1806 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1806 | var_system_crypto_policy='FIPS' | 1807 | var_system_crypto_policy='FIPS' |
| Offset 1855, 14 lines modified | Offset 1855, 26 lines modified | ||
| 1855 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 1855 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 1856 | $·sudo·yum·install·crypto-policies | 1856 | $·sudo·yum·install·crypto-policies |
| 1857 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 1857 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 1858 | Severity: ··medium | 1858 | Severity: ··medium |
| Max diff block lines reached; 213424/220602 bytes (96.75%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·313 | 00037e50:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15079, 200 lines modified | Offset 15079, 200 lines modified | ||
| 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | ||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aed0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003aee0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003aef0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003af00:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aed0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003aee0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aef0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af10:·2069·643d·2269·646d·3532·3232·223e·3c74···id="idm5222"><t | |||
| 0003af20:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003af30:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003af40:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003af50:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003af60:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003af70:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003af80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af90:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003afa0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003afb0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003afc0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003afd0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afe0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aff0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b000:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b010:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b020:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b030:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b040:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b050:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b060:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b070:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b080:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b090:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b0a0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b0b0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b0c0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b0d0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b0e0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b0f0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b100:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b110:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b120:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b130:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b140:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b150:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b160:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b170:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b180:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b190:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b1a0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b1b0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b1c0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b1d0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b1e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b1f0:·646d·3532·3233·2220·7461·6269·6e64·6578··dm5223"·tabindex | |||
| 0003b200:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b210:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b220:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b230:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b240:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b250:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b260:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b270:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b280:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b290:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b2a0:·7365·2220·6964·3d22·6964·6d35·3232·3322··se"·id="idm5223" | |||
| 0003b2b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b2c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b2d0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b2e0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b2f0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b300:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b310:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003 | 0003af10:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b330:·7461·7267·6574·3d22·2369·646d·3532·3234··target="#idm5224 | |||
| 0003b340:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b350:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b360:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b370:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b380:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b390:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b3a0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b3b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b3c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b3d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b3e0:·2069·643d·2269·646d·3532·3234·223e·3c74···id="idm5224"><t | |||
| 0003b3f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b400:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b410:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b420:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b430:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b440:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b450:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003 | 0003af20:·646d·3532·3232·223e·3c70·7265·3e3c·636f··dm5222"><pre><co | ||
| 0003af30:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003af40:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003af50:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003af60:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003af70:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003af80:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003af90:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003afa0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003afb0:·6964·6d35·3232·3322·2074·6162·696e·6465··idm5223"·tabinde | |||
| Max diff block lines reached; 2435080/2462596 bytes (98.88%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·with·GUI·for·Oracle·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·with·GUI·for·Oracle·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 102, 14 lines modified | Offset 102, 26 lines modified | ||
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | [[packages]] | ||
| 111 | name·=·"aide" | ||
| 112 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package·--add=aide | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 114 | -·name:·Ensure·aide·is·installed | 124 | -·name:·Ensure·aide·is·installed |
| 115 | ··package: | 125 | ··package: |
| Offset 123, 19 lines modified | Offset 135, 14 lines modified | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | 135 | ··-·PCI-DSSv4-11.5.2 |
| 124 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 125 | ··-·low_complexity | 137 | ··-·low_complexity |
| 126 | ··-·low_disruption | 138 | ··-·low_disruption |
| 127 | ··-·medium_severity | 139 | ··-·medium_severity |
| 128 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 129 | ··-·package_aide_installed | 141 | ··-·package_aide_installed |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 21 lines modified | Offset 162, 14 lines modified | ||
| 155 | include·install_aide | 162 | include·install_aide |
| 156 | class·install_aide·{ | 163 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 164 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 165 | ····ensure·=>·'installed', |
| 159 | ··} | 166 | ··} |
| 160 | } | 167 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·--add=aide | ||
| 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 168 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 169 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 169 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 170 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 170 | Severity: ··medium | 171 | Severity: ··medium |
| 171 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 172 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 173 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 173 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 174 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1694, 14 lines modified | Offset 1694, 18 lines modified | ||
| 1694 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1694 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1695 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1695 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1696 | ············_\x8i_\x8s_\x8m······1446 | 1696 | ············_\x8i_\x8s_\x8m······1446 |
| 1697 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1697 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1698 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1698 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1699 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1699 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1700 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1700 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1702 | [customizations] | ||
| 1703 | fips·=·true | ||
| 1701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1704 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1702 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1705 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1703 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1706 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1704 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1707 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1705 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1708 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1706 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1709 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1707 | ··set_fact: | 1710 | ··set_fact: |
| Offset 1797, 18 lines modified | Offset 1801, 14 lines modified | ||
| 1797 | ··-·NIST-800-53-SC-13 | 1801 | ··-·NIST-800-53-SC-13 |
| 1798 | ··-·enable_fips_mode | 1802 | ··-·enable_fips_mode |
| 1799 | ··-·high_severity | 1803 | ··-·high_severity |
| 1800 | ··-·medium_complexity | 1804 | ··-·medium_complexity |
| 1801 | ··-·medium_disruption | 1805 | ··-·medium_disruption |
| 1802 | ··-·reboot_required | 1806 | ··-·reboot_required |
| 1803 | ··-·restrict_strategy | 1807 | ··-·restrict_strategy |
| 1804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1805 | [customizations] | ||
| 1806 | fips·=·true | ||
| 1807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1808 | #·Remediation·is·applicable·only·in·certain·platforms | 1809 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1809 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1810 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1810 | var_system_crypto_policy='FIPS' | 1811 | var_system_crypto_policy='FIPS' |
| Offset 1859, 14 lines modified | Offset 1859, 26 lines modified | ||
| 1859 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 1859 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 1860 | $·sudo·yum·install·crypto-policies | 1860 | $·sudo·yum·install·crypto-policies |
| 1861 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 1861 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 1862 | Severity: ··medium | 1862 | Severity: ··medium |
| Max diff block lines reached; 207611/214804 bytes (96.65%) of diff not shown. | |||
| Offset 14324, 15 lines modified | Offset 14324, 15 lines modified | ||
| 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037fa0:·206f·6620·3230·323 | 00037fa0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15093, 80 lines modified | Offset 15093, 80 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003afd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003afe0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af | 0003afb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003afc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3130·3635·223e·3c70·7265·3e3c·636f··dm1065"><pre><co | |||
| 0003b010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b030:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b040:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b0 | 0003b050:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b010:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b020:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b030:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b040:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b050:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b060:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b070:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0 | 0003b060:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b070:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b080:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b090:·6964·6d31·3036·3622·2074·6162·696e·6465··idm1066"·tabinde | |||
| 0003b0a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b0b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b0c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b0d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b0e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b0f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b100:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b110:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b120:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b130:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b140:·646d·3130·3636·223e·3c74·6162·6c65·2063··dm1066"><table·c | |||
| 0003b150:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b160:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b170:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b180:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b190:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b1a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b1c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b1d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b1e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b1f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b200:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b210:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b220:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b0e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b1b0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1c0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1d0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1e0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b1f0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b200:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b210:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b220:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b230:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b240:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b250:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b260:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b270:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b280:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b290:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b2a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b2b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2d0:·646d·3130·3636·2220·7461·6269·6e64·6578··dm1066"·tabindex | |||
| 0003b2e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b300:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b310:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b320:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b330:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b340:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b350:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b360:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b370:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b380:·7365·2220·6964·3d22·6964·6d31·3036·3622··se"·id="idm1066" | |||
| 0003b | 0003b230:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b3a0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b | 0003b240:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | ||
| 0003b250:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b260:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b270:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| Max diff block lines reached; 451814/462630 bytes (97.66%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:openembedded:harden: | 44 | ····*·cpe:/o:openembedded:harden: |
| 45 | ····*·cpe:/o:openembedded:nodistro: | 45 | ····*·cpe:/o:openembedded:nodistro: |
| 46 | ····*·cpe:/o:openembedded:petalinux: | 46 | ····*·cpe:/o:openembedded:petalinux: |
| 47 | ····*·cpe:/o:openembedded:poky: | 47 | ····*·cpe:/o:openembedded:poky: |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 14 lines modified | Offset 120, 19 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 137 | ··package: |
| Offset 141, 19 lines modified | Offset 146, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 148 | ··-·low_complexity |
| 144 | ··-·low_disruption | 149 | ··-·low_disruption |
| 145 | ··-·medium_severity | 150 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | [[packages]] | ||
| 150 | name·=·"aide" | ||
| 151 | version·=·"*" | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 158 | include·install_aide |
| Offset 4264, 14 lines modified | Offset 4264, 19 lines modified | ||
| 4264 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4264 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4265 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4265 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4266 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4266 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4267 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4267 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4268 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4268 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4269 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4269 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4272 | [[packages]] | ||
| 4273 | name·=·"firewalld" | ||
| 4274 | version·=·"*" | ||
| 4271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4276 | -·name:·Ensure·firewalld·is·installed | 4280 | -·name:·Ensure·firewalld·is·installed |
| 4277 | ··package: | 4281 | ··package: |
| Offset 4283, 19 lines modified | Offset 4288, 14 lines modified | ||
| 4283 | ··-·PCI-DSSv4-1.2.1 | 4288 | ··-·PCI-DSSv4-1.2.1 |
| 4284 | ··-·enable_strategy | 4289 | ··-·enable_strategy |
| 4285 | ··-·low_complexity | 4290 | ··-·low_complexity |
| 4286 | ··-·low_disruption | 4291 | ··-·low_disruption |
| 4287 | ··-·medium_severity | 4292 | ··-·medium_severity |
| 4288 | ··-·no_reboot_needed | 4293 | ··-·no_reboot_needed |
| 4289 | ··-·package_firewalld_installed | 4294 | ··-·package_firewalld_installed |
| 4290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4291 | [[packages]] | ||
| 4292 | name·=·"firewalld" | ||
| 4293 | version·=·"*" | ||
| 4294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4296 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4297 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4298 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4299 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4299 | include·install_firewalld | 4300 | include·install_firewalld |
| Offset 4322, 14 lines modified | Offset 4322, 18 lines modified | ||
| 4322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 | 4322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 |
| 4323 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 4323 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 4324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 4324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 4325 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 4325 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 4326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- | 4326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- |
| 4327 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 4327 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 4328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 4328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 4329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4330 | [customizations.services] | ||
| 4331 | enabled·=·["firewalld"] | ||
| 4329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4334 | -·name:·Gather·the·package·facts | 4337 | -·name:·Gather·the·package·facts |
| 4335 | ··package_facts: | 4338 | ··package_facts: |
| Offset 4379, 18 lines modified | Offset 4383, 14 lines modified | ||
| 4379 | ··-·PCI-DSSv4-1.2.1 | 4383 | ··-·PCI-DSSv4-1.2.1 |
| 4380 | ··-·enable_strategy | 4384 | ··-·enable_strategy |
| 4381 | ··-·low_complexity | 4385 | ··-·low_complexity |
| 4382 | ··-·low_disruption | 4386 | ··-·low_disruption |
| 4383 | ··-·medium_severity | 4387 | ··-·medium_severity |
| 4384 | ··-·no_reboot_needed | 4388 | ··-·no_reboot_needed |
| 4385 | ··-·service_firewalld_enabled | 4389 | ··-·service_firewalld_enabled |
| 4386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4387 | [customizations.services] | ||
| 4388 | enabled·=·["firewalld"] | ||
| 4389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 30046/35620 bytes (84.35%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037f50:·206f·6620·3230·323 | 00037f50:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15088, 80 lines modified | Offset 15088, 80 lines modified | ||
| 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | ||
| 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003af60:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003af70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003af80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003afa0:·6964·3d22·6964·6d31·3036·3522·3e3c·7461··id="idm1065"><ta | |||
| 0003afb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003afc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003afd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003afe0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003aff0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b000:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b020:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b030:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b040:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b050:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003 | 0003af60:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003af70:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003af80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afa0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afb0:·6d31·3036·3522·3e3c·7072·653e·3c63·6f64··m1065"><pre><cod | |||
| 0003afc0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003afd0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003afe0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003aff0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b000:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b010:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b020:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b030:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b040:·646d·3130·3636·2220·7461·6269·6e64·6578··dm1066"·tabindex | |||
| 0003b050:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b060:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b070:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b080:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b090:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b0a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b0b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b0c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0f0:·6d31·3036·3622·3e3c·7461·626c·6520·636c··m1066"><table·cl | |||
| 0003b100:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b110:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b120:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b130:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b140:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b150:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b160:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b170:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b180:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b190:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b | 0003b1a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b1d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b1e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1f0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b200:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b210:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b220:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b230:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b240:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b250:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b260:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b270:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b280:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b290:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b2a0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b2c0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b2d0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b2e0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b2f0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b300:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b310:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b320:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b330:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b340:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b350:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b360:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b090:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0a0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b0b0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b0c0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b0d0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b0e0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b0f0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b100:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b110:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b120:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b130:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b140:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b150:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b160:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b170:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b180:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b190:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b1a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b1b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b1c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b1d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b1e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| Max diff block lines reached; 451952/462768 bytes (97.66%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openembedded:harden: | 42 | ····*·cpe:/o:openembedded:harden: |
| 43 | ····*·cpe:/o:openembedded:nodistro: | 43 | ····*·cpe:/o:openembedded:nodistro: |
| 44 | ····*·cpe:/o:openembedded:petalinux: | 44 | ····*·cpe:/o:openembedded:petalinux: |
| 45 | ····*·cpe:/o:openembedded:poky: | 45 | ····*·cpe:/o:openembedded:poky: |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 19 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 135 | ··package: |
| Offset 139, 19 lines modified | Offset 144, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 146 | ··-·low_complexity |
| 142 | ··-·low_disruption | 147 | ··-·low_disruption |
| 143 | ··-·medium_severity | 148 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 156 | include·install_aide |
| Offset 3828, 14 lines modified | Offset 3828, 19 lines modified | ||
| 3828 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 3828 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 3829 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 3829 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 3830 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 3830 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 3831 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 3831 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 3832 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 3832 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 3833 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 3833 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 3834 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 3834 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 3835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3836 | [[packages]] | ||
| 3837 | name·=·"firewalld" | ||
| 3838 | version·=·"*" | ||
| 3835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3840 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3841 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3842 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3843 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3840 | -·name:·Ensure·firewalld·is·installed | 3844 | -·name:·Ensure·firewalld·is·installed |
| 3841 | ··package: | 3845 | ··package: |
| Offset 3847, 19 lines modified | Offset 3852, 14 lines modified | ||
| 3847 | ··-·PCI-DSSv4-1.2.1 | 3852 | ··-·PCI-DSSv4-1.2.1 |
| 3848 | ··-·enable_strategy | 3853 | ··-·enable_strategy |
| 3849 | ··-·low_complexity | 3854 | ··-·low_complexity |
| 3850 | ··-·low_disruption | 3855 | ··-·low_disruption |
| 3851 | ··-·medium_severity | 3856 | ··-·medium_severity |
| 3852 | ··-·no_reboot_needed | 3857 | ··-·no_reboot_needed |
| 3853 | ··-·package_firewalld_installed | 3858 | ··-·package_firewalld_installed |
| 3854 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3855 | [[packages]] | ||
| 3856 | name·=·"firewalld" | ||
| 3857 | version·=·"*" | ||
| 3858 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3859 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3860 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3861 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3862 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3863 | include·install_firewalld | 3864 | include·install_firewalld |
| Offset 3886, 14 lines modified | Offset 3886, 18 lines modified | ||
| 3886 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 | 3886 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 |
| 3887 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 3887 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 3888 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 3888 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 3889 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 3889 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 3890 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- | 3890 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- |
| 3891 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 3891 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 3892 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 3892 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 3893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3894 | [customizations.services] | ||
| 3895 | enabled·=·["firewalld"] | ||
| 3893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3898 | -·name:·Gather·the·package·facts | 3901 | -·name:·Gather·the·package·facts |
| 3899 | ··package_facts: | 3902 | ··package_facts: |
| Offset 3943, 18 lines modified | Offset 3947, 14 lines modified | ||
| 3943 | ··-·PCI-DSSv4-1.2.1 | 3947 | ··-·PCI-DSSv4-1.2.1 |
| 3944 | ··-·enable_strategy | 3948 | ··-·enable_strategy |
| 3945 | ··-·low_complexity | 3949 | ··-·low_complexity |
| 3946 | ··-·low_disruption | 3950 | ··-·low_disruption |
| 3947 | ··-·medium_severity | 3951 | ··-·medium_severity |
| 3948 | ··-·no_reboot_needed | 3952 | ··-·no_reboot_needed |
| 3949 | ··-·service_firewalld_enabled | 3953 | ··-·service_firewalld_enabled |
| 3950 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3951 | [customizations.services] | ||
| 3952 | enabled·=·["firewalld"] | ||
| 3953 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3954 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 29990/35564 bytes (84.33%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2028·6173·206f·6620·3230·323 | 00037f30:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037f40:·3 | 00037f40:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15113, 80 lines modified | Offset 15113, 80 lines modified | ||
| 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | ||
| 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b0f0:·6564·6961·7469·6f6e·204 | 0003b0f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b140:·3131·3233·223e·3c74·6162·6c65·2063·6c61··1123"><table·cla | |||
| 0003b150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b100:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b110:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b120:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b130:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b140:·6522·2069·643d·2269·646d·3131·3233·223e··e"·id="idm1123"> | |||
| 0003b150:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b160:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b170:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b180:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b190:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b1a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b1c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b1d0:·6172·6765·743d·2223·6964·6d31·3132·3422··arget="#idm1124" | |||
| 0003b1e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b1f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b200:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b210:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b220:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b230:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b240:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b250:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b260:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b270:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b280:·6522·2069·643d·2269·646d·3131·3234·223e··e"·id="idm1124"> | |||
| 0003b290:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b2c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b2d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b2e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b300:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b310:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b330:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b | 0003b340:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b350:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b360:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b370:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b380:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b390:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b3a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b3b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b3c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b3d0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b3e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b3f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b400:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b410:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b420:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b430:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b440:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b450:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b460:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b470:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b480:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b490:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b4a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b4b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b4c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b4d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b4e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b4f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b500:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b240:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b250:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b260:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b270:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b280:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b290:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b2a0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b2b0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b2c0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b2d0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b2e0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b2f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b300:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b310:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b320:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b330:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b340:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b350:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b360:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 330984/341938 bytes (96.80%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server | 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server |
| 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server | 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server |
| 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server | 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 143, 19 lines modified | Offset 148, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_aide | 160 | include·install_aide |
| Offset 5672, 14 lines modified | Offset 5672, 18 lines modified | ||
| 5672 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5672 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5673 | ···················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1), | 5673 | ···················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1), |
| 5674 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310 | 5674 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310 |
| 5675 | ···················(c),·164.310(d)(1),·164.310(d)(2)(iii) | 5675 | ···················(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 5676 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 5676 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 5677 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 5677 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 5678 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 5678 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 5679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5680 | [customizations.services] | ||
| 5681 | masked·=·["debug-shell"] | ||
| 5679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5682 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5680 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5683 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5681 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5684 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5682 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5685 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5683 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 5686 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 5684 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 5687 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 5685 | ····the·System | 5688 | ····the·System |
| Offset 5749, 18 lines modified | Offset 5753, 14 lines modified | ||
| 5749 | ··-·NIST-800-53-CM-6 | 5753 | ··-·NIST-800-53-CM-6 |
| 5750 | ··-·disable_strategy | 5754 | ··-·disable_strategy |
| 5751 | ··-·low_complexity | 5755 | ··-·low_complexity |
| 5752 | ··-·low_disruption | 5756 | ··-·low_disruption |
| 5753 | ··-·medium_severity | 5757 | ··-·medium_severity |
| 5754 | ··-·no_reboot_needed | 5758 | ··-·no_reboot_needed |
| 5755 | ··-·service_debug-shell_disabled | 5759 | ··-·service_debug-shell_disabled |
| 5756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5757 | [customizations.services] | ||
| 5758 | masked·=·["debug-shell"] | ||
| 5759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5761 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5762 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5763 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 5764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 5764 | include·disable_debug-shell | 5765 | include·disable_debug-shell |
| Offset 7056, 14 lines modified | Offset 7056, 18 lines modified | ||
| 7056 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR | 7056 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR |
| 7057 | ···························7.2 | 7057 | ···························7.2 |
| 7058 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 7058 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 7059 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 7059 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 7060 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 7060 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 7061 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 7061 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 7062 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 7062 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 7063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7064 | [customizations.services] | ||
| 7065 | enabled·=·["rsyslog"] | ||
| 7063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7064 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7065 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7066 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7067 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7068 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 7071 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 7069 | ··block: | 7072 | ··block: |
| Offset 7086, 18 lines modified | Offset 7090, 14 lines modified | ||
| 7086 | ··-·NIST-800-53-CM-6(a) | 7090 | ··-·NIST-800-53-CM-6(a) |
| 7087 | ··-·enable_strategy | 7091 | ··-·enable_strategy |
| 7088 | ··-·low_complexity | 7092 | ··-·low_complexity |
| 7089 | ··-·low_disruption | 7093 | ··-·low_disruption |
| 7090 | ··-·medium_severity | 7094 | ··-·medium_severity |
| 7091 | ··-·no_reboot_needed | 7095 | ··-·no_reboot_needed |
| 7092 | ··-·service_rsyslog_enabled | 7096 | ··-·service_rsyslog_enabled |
| 7093 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7094 | [customizations.services] | ||
| 7095 | enabled·=·["rsyslog"] | ||
| 7096 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7097 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7097 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7098 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7098 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7099 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 25166/31025 bytes (81.12%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2020·2861·7320·6f66·2032·3032·3 | 00037f30:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037f40:·2d3 | 00037f40:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:opensuse:leap:15.0 | 42 | ····*·cpe:/o:opensuse:leap:15.0 |
| 43 | ····*·cpe:/o:opensuse:leap:42.1 | 43 | ····*·cpe:/o:opensuse:leap:42.1 |
| 44 | ····*·cpe:/o:opensuse:leap:42.2 | 44 | ····*·cpe:/o:opensuse:leap:42.2 |
| 45 | ····*·cpe:/o:opensuse:leap:42.3 | 45 | ····*·cpe:/o:opensuse:leap:42.3 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups | 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups |
| 54 | and·3·rules | 54 | and·3·rules |
| 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037eb0:·206f·6620·3230·323 | 00037eb0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 14308, 15 lines modified | Offset 14308, 15 lines modified | ||
| 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ea0:·206f·6620·3230·323 | 00037ea0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 14310, 15 lines modified | Offset 14310, 15 lines modified | ||
| 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ec0:·206f·6620·3230·323 | 00037ec0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037eb0:·3230·323 | 00037eb0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e50:·2d3 | 00037e50:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037e40:·206f·6620·3230·323 | 00037e40:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e60:·3 | 00037e60:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000381a0:·7320·6f66·2032·3032·3 | 000381a0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000381a0:·3032·3 | 000381a0:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14357, 16 lines modified | Offset 14357, 16 lines modified | ||
| 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000381b0:·2020·2861·7320·6f66·2032·3032·3 | 000381b0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 000381c0:·2d3 | 000381c0:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14357, 15 lines modified | Offset 14357, 15 lines modified | ||
| 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000381b0:·6f66·2032·3032·3 | 000381b0:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037f10:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037f20:·2d31·3 | 00037f20:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S |
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile |
| 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS | 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14287, 16 lines modified | Offset 14287, 16 lines modified | ||
| 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d50:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d50:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d60:·313 | 00037d60:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d50:·6173·206f·6620·3230·323 | 00037d50:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f70:·7320·6f66·2032·3032·3 | 00037f70:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15097, 234 lines modified | Offset 15097, 234 lines modified | ||
| 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | ||
| 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aff0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003aff0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b000:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b010:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b020:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b030:·7365·2220·6964·3d22·6964·6d37·3235·3022··se"·id="idm7250" | |||
| 0003b040:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b050:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b060:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b070:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b080:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b090:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b0a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b0e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b0f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b100:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b110:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b120:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b130:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b140:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b150:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b160:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b170:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b180:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b190:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b1a0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b1b0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b1c0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b1d0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b1e0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b1f0:·2043·4345·2d39·3034·3737·2d31·0a20·202d···CCE-90477-1.··- | |||
| 0003b200:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b210:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b220:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b230:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b240:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b250:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b260:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b270:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b280:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b290:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b2a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b2b0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b2c0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b2d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b2e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b2f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b300:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b310:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b320:·2223·6964·6d37·3235·3122·2074·6162·696e··"#idm7251"·tabin | |||
| 0003b330:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b340:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b350:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b360:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b370:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b380:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003b390:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b3a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3c0:·7365·2220·6964·3d22·6964·6d37·3235·3122··se"·id="idm7251" | |||
| 0003b3d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b3e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b3f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b400:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b410:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b420:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b430:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b440:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b450:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b460:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b470:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b480:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b490:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4a0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b4b0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b4c0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003b4d0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003b4e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b4f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b500:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b510:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b520:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b530:·2223·6964·6d37·3235·3222·2074·6162·696e··"#idm7252"·tabin | |||
| 0003b540:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b550:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b560:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b570:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b580:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b590:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b5a0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b5b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b5c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b5d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b5e0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b5f0:·3532·223e·3c70·7265·3e3c·636f·6465·3e0a··52"><pre><code>. | |||
| 0003b600:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b610:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b620:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b630:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b640:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b650:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| Max diff block lines reached; 3966754/3998824 bytes (99.20%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 102, 14 lines modified | Offset 102, 33 lines modified | ||
| 102 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 102 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 103 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 103 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 107 | ·············_\x8c_\x8i_\x8s············6.1.1 | 107 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | [[packages]] | ||
| 111 | name·=·"aide" | ||
| 112 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package·--add=aide | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·install·aide | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 114 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 115 | ··package: | 131 | ··package: |
| Offset 124, 26 lines modified | Offset 143, 14 lines modified | ||
| 124 | ··-·PCI-DSSv4-11.5.2 | 143 | ··-·PCI-DSSv4-11.5.2 |
| 125 | ··-·enable_strategy | 144 | ··-·enable_strategy |
| 126 | ··-·low_complexity | 145 | ··-·low_complexity |
| 127 | ··-·low_disruption | 146 | ··-·low_disruption |
| 128 | ··-·medium_severity | 147 | ··-·medium_severity |
| 129 | ··-·no_reboot_needed | 148 | ··-·no_reboot_needed |
| 130 | ··-·package_aide_installed | 149 | ··-·package_aide_installed |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | 155 | #·Remediation·is·applicable·only·in·certain·platforms |
| 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 163, 21 lines modified | Offset 170, 14 lines modified | ||
| 163 | include·install_aide | 170 | include·install_aide |
| 164 | class·install_aide·{ | 171 | class·install_aide·{ |
| 165 | ··package·{·'aide': | 172 | ··package·{·'aide': |
| 166 | ····ensure·=>·'installed', | 173 | ····ensure·=>·'installed', |
| 167 | ··} | 174 | ··} |
| 168 | } | 175 | } |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·--add=aide | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 180 | To·initiate·a·manual·check,·run·the·following·command: | 181 | To·initiate·a·manual·check,·run·the·following·command: |
| 181 | $·sudo·/usr/sbin/aide·--check | 182 | $·sudo·/usr/sbin/aide·--check |
| Offset 311, 51 lines modified | Offset 311, 51 lines modified | ||
| 311 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 311 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 312 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 312 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 313 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 313 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 314 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 314 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 315 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 315 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 316 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 316 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 317 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 317 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 319 | logvol·/home·1024 | ||
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 321 | [[customizations.filesystem]] | 319 | [[customizations.filesystem]] |
| 322 | mountpoint·=·"/home" | 320 | mountpoint·=·"/home" |
| 323 | size·=·1073741824 | 321 | size·=·1073741824 |
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 323 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 324 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 325 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 326 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 329 | part·/home | 327 | part·/home |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | logvol·/home·1024 | ||
| 330 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 330 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 331 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 331 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 332 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 332 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 249130/255713 bytes (97.43%) of diff not shown. | |||
| Offset 14320, 15 lines modified | Offset 14320, 15 lines modified | ||
| 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f60:·7320·6f66·2032·3032·3 | 00037f60:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15102, 235 lines modified | Offset 15102, 235 lines modified | ||
| 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b040:·6961·7469·6f6e·204 | 0003b040:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b050:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b060:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b070:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b080:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b090:·3530·223e·3c74·6162·6c65·2063·6c61·7373··50"><table·class | |||
| 0003b0a0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b0b0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b0c0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b0d0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b0e0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b0f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b | 0003b050:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b060:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b070:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b080:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b090:·2069·643d·2269·646d·3732·3530·223e·3c70···id="idm7250"><p | |||
| 0003b0a0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b0b0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b0c0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b0d0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b0e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b0f0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b100:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b110:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b120:·6765·743d·2223·6964·6d37·3235·3122·2074··get="#idm7251"·t | |||
| 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b190:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| 0003b1a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1d0:·2220·6964·3d22·6964·6d37·3235·3122·3e3c··"·id="idm7251">< | |||
| 0003b1e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b1f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b200:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b210:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b220:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b230:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b240:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b250:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b130:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b140:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b150:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b160:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b170:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b180:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b190:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b1a0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b1b0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b1c0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b1d0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b1e0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b1f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b200:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b210:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b220:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b230:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b240:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b250:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b260:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b270:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b280:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b290:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b2a0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b2b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b2c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b2d0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b2e0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b2f0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b300:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b310:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b320:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b330:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b340:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b350:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b360:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b370:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b380:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b390:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b3a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b3b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b3c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b3d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b3e0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b3f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b400:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b410:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b420:·3531·223e·3c74·6162·6c65·2063·6c61·7373··51"><table·class | |||
| 0003b430:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b440:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b450:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b460:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b470:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b260:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b490:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b270:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b280:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b | 0003b290:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b2a0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| Max diff block lines reached; 4061126/4093334 bytes (99.21%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 59 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 60 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 60 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Ensure·aide·is·installed | 131 | -·name:·Ensure·aide·is·installed |
| 116 | ··package: | 132 | ··package: |
| Offset 125, 26 lines modified | Offset 144, 14 lines modified | ||
| 125 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 126 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 127 | ··-·low_complexity | 146 | ··-·low_complexity |
| 128 | ··-·low_disruption | 147 | ··-·low_disruption |
| 129 | ··-·medium_severity | 148 | ··-·medium_severity |
| 130 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 131 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 171, 14 lines modified | ||
| 164 | include·install_aide | 171 | include·install_aide |
| 165 | class·install_aide·{ | 172 | class·install_aide·{ |
| 166 | ··package·{·'aide': | 173 | ··package·{·'aide': |
| 167 | ····ensure·=>·'installed', | 174 | ····ensure·=>·'installed', |
| 168 | ··} | 175 | ··} |
| 169 | } | 176 | } |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 179 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 181 | To·initiate·a·manual·check,·run·the·following·command: | 182 | To·initiate·a·manual·check,·run·the·following·command: |
| 182 | $·sudo·/usr/sbin/aide·--check | 183 | $·sudo·/usr/sbin/aide·--check |
| Offset 795, 51 lines modified | Offset 795, 51 lines modified | ||
| 795 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 795 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 796 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 796 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 797 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 797 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 798 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 798 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 799 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 799 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 800 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 800 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 801 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 801 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 803 | logvol·/home·1024 | ||
| 804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 805 | [[customizations.filesystem]] | 803 | [[customizations.filesystem]] |
| 806 | mountpoint·=·"/home" | 804 | mountpoint·=·"/home" |
| 807 | size·=·1073741824 | 805 | size·=·1073741824 |
| 808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 809 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 807 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 810 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 808 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 811 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 809 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 812 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 810 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 813 | part·/home | 811 | part·/home |
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 813 | logvol·/home·1024 | ||
| 814 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 814 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 815 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 815 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 816 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 816 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 258164/264694 bytes (97.53%) of diff not shown. | |||
| Offset 14322, 15 lines modified | Offset 14322, 15 lines modified | ||
| 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f80:·7320·6f66·2032·3032·3 | 00037f80:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15093, 234 lines modified | Offset 15093, 234 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003afd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003afe0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af | 0003afb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003afc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3732·3530·223e·3c70·7265·3e3c·636f··dm7250"><pre><co | |||
| 0003b010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b030:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b040:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b0 | 0003b050:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b060:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b070:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b080:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b090:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b0a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b0b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b0c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b0d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b0e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b0f0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003b100:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003b110:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b120:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b130:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b140:·6964·6d37·3235·3122·3e3c·7461·626c·6520··idm7251"><table· | |||
| 0003b150:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b160:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b170:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b180:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b190:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b010:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b020:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b030:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b040:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b050:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b060:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b070:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b0d0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b0e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | |||
| 0003b1b0:·452d·3930·3437·372d·310a·2020·2d20·434a··E-90477-1.··-·CJ | |||
| 0003b1c0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b200:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b210:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b220:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b230:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b240:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b250:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b260:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b270:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b280:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b290:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b2a0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b2b0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b2c0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2e0:·646d·3732·3531·2220·7461·6269·6e64·6578··dm7251"·tabindex | |||
| 0003b2f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b300:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b310:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b320:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b330:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b340:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003b350:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b360:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b370:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b380:·2069·643d·2269·646d·3732·3531·223e·3c74···id="idm7251"><t | |||
| 0003b390:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b3c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b3d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b3e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b3f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b400:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b | 0003b1a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b420:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b1b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b1c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b | 0003b1d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| Max diff block lines reached; 2564584/2596654 bytes (98.76%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 118, 14 lines modified | Offset 118, 33 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·--add=aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 146 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 147 | ··package: |
| Offset 140, 26 lines modified | Offset 159, 14 lines modified | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 141 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 161 | ··-·low_complexity |
| 143 | ··-·low_disruption | 162 | ··-·low_disruption |
| 144 | ··-·medium_severity | 163 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 146 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 171 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 186, 14 lines modified | ||
| 179 | include·install_aide | 186 | include·install_aide |
| 180 | class·install_aide·{ | 187 | class·install_aide·{ |
| 181 | ··package·{·'aide': | 188 | ··package·{·'aide': |
| 182 | ····ensure·=>·'installed', | 189 | ····ensure·=>·'installed', |
| 183 | ··} | 190 | ··} |
| 184 | } | 191 | } |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 197 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 350, 57 lines modified | Offset 350, 57 lines modified | ||
| 350 | ····························SR·7.6 | 350 | ····························SR·7.6 |
| 351 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 | 351 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.1.1,·A.13.2.1,·A.14.1.3 |
| 352 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 352 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 353 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 353 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 355 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 355 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 356 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 356 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 358 | logvol·/home·1024 | ||
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | [[customizations.filesystem]] | 358 | [[customizations.filesystem]] |
| 361 | mountpoint·=·"/home" | 359 | mountpoint·=·"/home" |
| 362 | size·=·1073741824 | 360 | size·=·1073741824 |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 368 | part·/home | 366 | part·/home |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | logvol·/home·1024 | ||
| 369 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 369 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 370 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 370 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 371 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 371 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| Max diff block lines reached; 173972/179996 bytes (96.65%) of diff not shown. | |||
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037f70:·2032·3032·3 | 00037f70:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14771, 218 lines modified | Offset 14771, 218 lines modified | ||
| 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | ||
| 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039b90:·6469·6174·696f·6e20·4 | 00039b90:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039ba0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039bb0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039bc0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039bd0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039be0:·2220·6964·3d22·6964·6d31·3036·3837·223e··"·id="idm10687"> | |||
| 00039ba0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039bb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039bc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039bd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00039be0:·3036·3837·223e·3c74·6162·6c65·2063·6c61··0687"><table·cla | |||
| 00039bf0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00039c00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00039c10:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00039c20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00039c30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00039c40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039c50:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039c60:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00039c70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039c80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00039c90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039ca0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039cb0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039cc0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039cd0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039ce0:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 00039cf0:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 00039d00:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 00039d10:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 00039d20:·2d61·7574·6f6d·6174·6963·0a20·2020·2073··-automatic.····s | |||
| 00039d30:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00039d40:·7461·6773·3a0a·2020·2d20·4343·452d·3837··tags:.··-·CCE-87 | |||
| 00039d50:·3536·312d·370a·2020·2d20·656e·6162·6c65··561-7.··-·enable | |||
| 00039d60:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00039d70:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00039d80:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00039d90:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00039da0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00039db0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00039dc0:·6b61·6765·5f64·6e66·2d61·7574·6f6d·6174··kage_dnf-automat | |||
| 00039dd0:·6963·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ic_installed.</c | |||
| 00039de0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039df0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e30:·6964·6d31·3036·3838·2220·7461·6269·6e64··idm10688"·tabind | |||
| 00039e40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039e50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039e60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039e70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039e80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039e90:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 00039ea0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00039eb0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00039ec0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00039ed0:·6522·2069·643d·2269·646d·3130·3638·3822··e"·id="idm10688" | |||
| 00039ee0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039ef0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039f00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039f10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039f20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039f30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039f40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039f50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039f60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039f70:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039f80:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039f90:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039fa0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039fb0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039fc0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039 | 00039bf0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 00039c00:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00039fe0:·6520·696e·7374·616c·6c20·646e·662d·6175··e·install·dnf-au | |||
| 00039ff0:·746f·6d61·7469·630a·3c2f·636f·6465·3e3c··tomatic.</code>< | |||
| 0003a000:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a010:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003a020:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a030:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003a040:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | |||
| 0003a050:·3638·3922·2074·6162·696e·6465·783d·2230··689"·tabindex="0 | |||
| 0003a060:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a070:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a080:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a090:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a0a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a0b0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003a0c0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003a0d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a0e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a0f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a100:·2069·643d·2269·646d·3130·3638·3922·3e3c···id="idm10689">< | |||
| 0003a110:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003a120:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003a130:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 0003a140:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003a150:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a160:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a170:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a180:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a190:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a1a0:·6964·6d31·3036·3930·2220·7461·6269·6e64··idm10690"·tabind | |||
| Max diff block lines reached; 370066/399928 bytes (92.53%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 84, 14 lines modified | Offset 84, 33 lines modified | ||
| 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 85 | ·············suitable·for·automatic,·regular·execution. | 85 | ·············suitable·for·automatic,·regular·execution. |
| 86 | Severity: ···medium | 86 | Severity: ···medium |
| 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 88 | Identifiers:·CCE-87561-7 | 88 | Identifiers:·CCE-87561-7 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | [[packages]] | ||
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 100 | package·--add=dnf-automatic | ||
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 106 | package·install·dnf-automatic | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | -·name:·Ensure·dnf-automatic·is·installed | 112 | -·name:·Ensure·dnf-automatic·is·installed |
| 97 | ··package: | 113 | ··package: |
| Offset 101, 26 lines modified | Offset 120, 14 lines modified | ||
| 101 | ··-·CCE-87561-7 | 120 | ··-·CCE-87561-7 |
| 102 | ··-·enable_strategy | 121 | ··-·enable_strategy |
| 103 | ··-·low_complexity | 122 | ··-·low_complexity |
| 104 | ··-·low_disruption | 123 | ··-·low_disruption |
| 105 | ··-·medium_severity | 124 | ··-·medium_severity |
| 106 | ··-·no_reboot_needed | 125 | ··-·no_reboot_needed |
| 107 | ··-·package_dnf-automatic_installed | 126 | ··-·package_dnf-automatic_installed |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | package·install·dnf-automatic | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | [[packages]] | ||
| 116 | name·=·"dnf-automatic" | ||
| 117 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 132 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 134, 21 lines modified | Offset 141, 14 lines modified | ||
| 134 | include·install_dnf-automatic | 141 | include·install_dnf-automatic |
| 135 | class·install_dnf-automatic·{ | 142 | class·install_dnf-automatic·{ |
| 136 | ··package·{·'dnf-automatic': | 143 | ··package·{·'dnf-automatic': |
| 137 | ····ensure·=>·'installed', | 144 | ····ensure·=>·'installed', |
| 138 | ··} | 145 | ··} |
| 139 | } | 146 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=dnf-automatic | ||
| 146 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 147 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 147 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 148 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 148 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 149 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 149 | automatic.conf. | 150 | automatic.conf. |
| 150 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 151 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 151 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 152 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 152 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 153 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9035, 14 lines modified | Offset 9035, 28 lines modified | ||
| 9035 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9035 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9036 | ····························A.9.1.2 | 9036 | ····························A.9.1.2 |
| 9037 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9037 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9038 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9038 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9039 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9039 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9040 | ·············_\x8c_\x8i_\x8s············2.1.3 | 9040 | ·············_\x8c_\x8i_\x8s············2.1.3 |
| 9041 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9041 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9042 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9043 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9044 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9045 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9046 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9047 | package·--remove=dhcp | ||
| 9048 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9049 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9050 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9051 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9052 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9053 | package·remove·dhcp | ||
| 9042 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9054 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9043 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9055 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9044 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9056 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9045 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9057 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9046 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9058 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9047 | -·name:·Ensure·dhcp·is·removed | 9059 | -·name:·Ensure·dhcp·is·removed |
| 9048 | ··package: | 9060 | ··package: |
| Max diff block lines reached; 36300/42006 bytes (86.42%) of diff not shown. | |||
| Offset 14292, 16 lines modified | Offset 14292, 16 lines modified | ||
| 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·2861·7320·6f66·2032·3032·3 | 00037da0:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037db0:·3 | 00037db0:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15135, 235 lines modified | Offset 15135, 235 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·204 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3732·3530·223e·3c74·6162·6c65·2063··dm7250"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b370:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b380:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3930·3437··gs:.··-·CCE-9047 | |||
| 0003b460:·372d·310a·2020·2d20·434a·4953·2d35·2e31··7-1.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b480:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b490:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b4a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b4b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b4c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b4d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b4e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b4f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b500:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b510:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b520:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b530:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b540:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b550:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b560:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b570:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b580:·7461·7267·6574·3d22·2369·646d·3732·3531··target="#idm7251 | |||
| 0003b590:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b5a0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b5b0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5c0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5d0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5e0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5f0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b600:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b610:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b620:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b630:·646d·3732·3531·223e·3c74·6162·6c65·2063··dm7251"><table·c | |||
| 0003b640:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b650:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b660:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b670:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b680:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b690:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b6b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b6c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b6d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b6e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b6f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b700:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b710:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b720:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b730:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003b740:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003b750:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b760:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b770:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b780:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b790:·7461·7267·6574·3d22·2369·646d·3732·3532··target="#idm7252 | |||
| 0003b7a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b7b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b7c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b7d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b7e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b7f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b800:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b810:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b820:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b830:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b840:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b850:·3d22·6964·6d37·3235·3222·3e3c·7072·653e··="idm7252"><pre> | |||
| 0003b860:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b870:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b880:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b890:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b8a0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| Max diff block lines reached; 5454257/5486603 bytes (99.41%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 33 lines modified | ||
| 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ·············_\x8c_\x8i_\x8s············6.1.1 | 113 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·--add=aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·install·aide | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 121 | ··package: | 137 | ··package: |
| Offset 130, 26 lines modified | Offset 149, 14 lines modified | ||
| 130 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 131 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 132 | ··-·low_complexity | 151 | ··-·low_complexity |
| 133 | ··-·low_disruption | 152 | ··-·low_disruption |
| 134 | ··-·medium_severity | 153 | ··-·medium_severity |
| 135 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 136 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 176, 14 lines modified | ||
| 169 | include·install_aide | 176 | include·install_aide |
| 170 | class·install_aide·{ | 177 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 178 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 179 | ····ensure·=>·'installed', |
| 173 | ··} | 180 | ··} |
| 174 | } | 181 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=aide | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 185 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 186 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 186 | To·initiate·a·manual·check,·run·the·following·command: | 187 | To·initiate·a·manual·check,·run·the·following·command: |
| 187 | $·sudo·/usr/sbin/aide·--check | 188 | $·sudo·/usr/sbin/aide·--check |
| Offset 705, 14 lines modified | Offset 705, 33 lines modified | ||
| 705 | ··-·PCI-DSSv4-2.2.7 | 705 | ··-·PCI-DSSv4-2.2.7 |
| 706 | ··-·configure_crypto_policy | 706 | ··-·configure_crypto_policy |
| 707 | ··-·high_severity | 707 | ··-·high_severity |
| 708 | ··-·low_complexity | 708 | ··-·low_complexity |
| 709 | ··-·low_disruption | 709 | ··-·low_disruption |
| 710 | ··-·no_reboot_needed | 710 | ··-·no_reboot_needed |
| 711 | ··-·restrict_strategy | 711 | ··-·restrict_strategy |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 713 | var_system_crypto_policy='' | ||
| 714 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 715 | rc=$? | ||
| 716 | if·test·"$rc"·=·127;·then | ||
| 717 | » echo·"$stderr_of_call"·>&2 | ||
| 718 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 719 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 720 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 721 | » false··#·end·with·an·error·code | ||
| 722 | elif·test·"$rc"·!=·0;·then | ||
| 723 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 724 | » false··#·end·with·an·error·code | ||
| 725 | fi | ||
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 419445/425040 bytes (98.68%) of diff not shown. | |||
| Offset 14293, 15 lines modified | Offset 14293, 15 lines modified | ||
| 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037db0:·2032·3032·3 | 00037db0:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15104, 235 lines modified | Offset 15104, 235 lines modified | ||
| 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b060:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b070:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b060:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b070:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b080:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b090:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b0a0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b0b0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b0c0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b0d0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b0e0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b0f0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b100:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b110:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b120:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b130:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b140:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b150:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b160:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b170:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b180:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b190:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b1a0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b1b0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b1c0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b1d0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b1e0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b1f0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b200:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b210:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b220:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b230:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b240:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b250:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b260:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b270:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b280:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b290:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b2a0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b2b0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b2c0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b2d0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b2e0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b2f0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b300:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b310:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b320:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b330:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b340:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b350:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b360:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b370:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b380:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b390:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 0003b3a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b3b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b3c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b3d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b3e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b3f0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b400:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b410:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b420:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b430:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b440:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003b450:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b460:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b470:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b480:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b490:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b4a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b4b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b4c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b4d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b4e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b4f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b500:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b510:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b520:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b530:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003b540:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003b550:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b560:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b570:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b580:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b590:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b5a0:·743d·2223·6964·6d37·3235·3222·2074·6162··t="#idm7252"·tab | |||
| 0003b5b0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b5c0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b5d0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b5e0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b5f0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b600:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b610:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b620:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b630:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b640:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b650:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b660:·3732·3532·223e·3c70·7265·3e3c·636f·6465··7252"><pre><code | |||
| 0003b670:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b680:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b690:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b6a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b6b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| Max diff block lines reached; 3471607/3503815 bytes (99.08%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Ensure·aide·is·installed | 131 | -·name:·Ensure·aide·is·installed |
| 116 | ··package: | 132 | ··package: |
| Offset 125, 26 lines modified | Offset 144, 14 lines modified | ||
| 125 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 126 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 127 | ··-·low_complexity | 146 | ··-·low_complexity |
| 128 | ··-·low_disruption | 147 | ··-·low_disruption |
| 129 | ··-·medium_severity | 148 | ··-·medium_severity |
| 130 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 131 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 171, 14 lines modified | ||
| 164 | include·install_aide | 171 | include·install_aide |
| 165 | class·install_aide·{ | 172 | class·install_aide·{ |
| 166 | ··package·{·'aide': | 173 | ··package·{·'aide': |
| 167 | ····ensure·=>·'installed', | 174 | ····ensure·=>·'installed', |
| 168 | ··} | 175 | ··} |
| 169 | } | 176 | } |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 179 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 181 | To·initiate·a·manual·check,·run·the·following·command: | 182 | To·initiate·a·manual·check,·run·the·following·command: |
| 182 | $·sudo·/usr/sbin/aide·--check | 183 | $·sudo·/usr/sbin/aide·--check |
| Offset 700, 14 lines modified | Offset 700, 33 lines modified | ||
| 700 | ··-·PCI-DSSv4-2.2.7 | 700 | ··-·PCI-DSSv4-2.2.7 |
| 701 | ··-·configure_crypto_policy | 701 | ··-·configure_crypto_policy |
| 702 | ··-·high_severity | 702 | ··-·high_severity |
| 703 | ··-·low_complexity | 703 | ··-·low_complexity |
| 704 | ··-·low_disruption | 704 | ··-·low_disruption |
| 705 | ··-·no_reboot_needed | 705 | ··-·no_reboot_needed |
| 706 | ··-·restrict_strategy | 706 | ··-·restrict_strategy |
| 707 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 708 | var_system_crypto_policy='' | ||
| 709 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 710 | rc=$? | ||
| 711 | if·test·"$rc"·=·127;·then | ||
| 712 | » echo·"$stderr_of_call"·>&2 | ||
| 713 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 714 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 715 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 716 | » false··#·end·with·an·error·code | ||
| 717 | elif·test·"$rc"·!=·0;·then | ||
| 718 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 719 | » false··#·end·with·an·error·code | ||
| 720 | fi | ||
| 707 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 721 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 708 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 722 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 295615/301220 bytes (98.14%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15095, 235 lines modified | Offset 15095, 235 lines modified | ||
| 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003afd0:·6961·7469·6f6e·204 | 0003afd0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003afe0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003afe0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aff0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b000:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b010:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b020:·3530·223e·3c74·6162·6c65·2063·6c61·7373··50"><table·class | |||
| 0003b030:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b040:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b050:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b060:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b070:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b080:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b090:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b0a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b0d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b0e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b0f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b100:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b110:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b120:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b130:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b140:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b150:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b160:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b170:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b180:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b190:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b1a0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b1b0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b1c0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b1d0:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b1e0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b1f0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b200:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b210:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b220:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b230:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b240:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b250:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b260:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b270:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b280:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b290:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b2a0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b2b0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b2c0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2d0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b2e0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b2f0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b300:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b310:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b320:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b330:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b340:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b350:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b360:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b370:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b380:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b390:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b3a0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b3b0:·3531·223e·3c74·6162·6c65·2063·6c61·7373··51"><table·class | |||
| 0003b3c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b3d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b3f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b400:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b410:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b420:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b430:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b440:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b450:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b460:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b470:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b480:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b490:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b4a0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b4b0:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003b4c0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003b4d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b4e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b4f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b500:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b510:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 0003b520:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b530:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b540:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b550:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b560:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b570:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b580:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b590:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b5a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b5b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5d0:·6d37·3235·3222·3e3c·7072·653e·3c63·6f64··m7252"><pre><cod | |||
| 0003b5e0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b5f0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b600:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b610:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b620:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b630:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| Max diff block lines reached; 3208261/3240469 bytes (99.01%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 33 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·aide | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 114 | ··package: | 130 | ··package: |
| Offset 123, 26 lines modified | Offset 142, 14 lines modified | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 124 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 125 | ··-·low_complexity | 144 | ··-·low_complexity |
| 126 | ··-·low_disruption | 145 | ··-·low_disruption |
| 127 | ··-·medium_severity | 146 | ··-·medium_severity |
| 128 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 129 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·install·aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"aide" | ||
| 139 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 21 lines modified | Offset 169, 14 lines modified | ||
| 162 | include·install_aide | 169 | include·install_aide |
| 163 | class·install_aide·{ | 170 | class·install_aide·{ |
| 164 | ··package·{·'aide': | 171 | ··package·{·'aide': |
| 165 | ····ensure·=>·'installed', | 172 | ····ensure·=>·'installed', |
| 166 | ··} | 173 | ··} |
| 167 | } | 174 | } |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 176 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 179 | To·initiate·a·manual·check,·run·the·following·command: | 180 | To·initiate·a·manual·check,·run·the·following·command: |
| 180 | $·sudo·/usr/sbin/aide·--check | 181 | $·sudo·/usr/sbin/aide·--check |
| Offset 698, 14 lines modified | Offset 698, 33 lines modified | ||
| 698 | ··-·PCI-DSSv4-2.2.7 | 698 | ··-·PCI-DSSv4-2.2.7 |
| 699 | ··-·configure_crypto_policy | 699 | ··-·configure_crypto_policy |
| 700 | ··-·high_severity | 700 | ··-·high_severity |
| 701 | ··-·low_complexity | 701 | ··-·low_complexity |
| 702 | ··-·low_disruption | 702 | ··-·low_disruption |
| 703 | ··-·no_reboot_needed | 703 | ··-·no_reboot_needed |
| 704 | ··-·restrict_strategy | 704 | ··-·restrict_strategy |
| 705 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 706 | var_system_crypto_policy='' | ||
| 707 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 708 | rc=$? | ||
| 709 | if·test·"$rc"·=·127;·then | ||
| 710 | » echo·"$stderr_of_call"·>&2 | ||
| 711 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 712 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 713 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 714 | » false··#·end·with·an·error·code | ||
| 715 | elif·test·"$rc"·!=·0;·then | ||
| 716 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 717 | » false··#·end·with·an·error·code | ||
| 718 | fi | ||
| 705 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 719 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 706 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 720 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 272507/278122 bytes (97.98%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15127, 234 lines modified | Offset 15127, 234 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b1d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b1e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b200:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b210:·6964·3d22·6964·6d37·3235·3022·3e3c·7461··id="idm7250"><ta | |||
| 0003b220:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b230:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b240:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b250:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b260:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b270:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b290:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b2a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b2c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b300:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b310:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b320:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b330:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b340:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b350:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b360:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b370:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b380:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b390:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b3a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b3b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b3c0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b3d0:·2d39·3034·3737·2d31·0a20·202d·2043·4a49··-90477-1.··-·CJI | |||
| 0003b3e0:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b3f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b400:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b410:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b420:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b430:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b440:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b450:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b460:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b470:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b480:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b490:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b4a0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b4b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b4c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b4d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b4e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b4f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b500:·6d37·3235·3122·2074·6162·696e·6465·783d··m7251"·tabindex= | |||
| 0003b510:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b520:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b530:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b540:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b550:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b560:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003b570:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b580:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b590:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b5a0:·6964·3d22·6964·6d37·3235·3122·3e3c·7461··id="idm7251"><ta | |||
| 0003b5b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b5c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b5d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b5e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b5f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b600:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b610:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b620:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b630:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b640:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b650:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b660:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b670:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b680:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b690:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b6a0:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003b6b0:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 0003b6c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b6d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b6e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b6f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b710:·6d37·3235·3222·2074·6162·696e·6465·783d··m7252"·tabindex= | |||
| 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b770:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b780:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b790:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b7a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b7b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b7c0:·6522·2069·643d·2269·646d·3732·3532·223e··e"·id="idm7252"> | |||
| 0003b7d0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b7e0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b7f0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b800:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b810:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b820:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b830:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| Max diff block lines reached; 5313448/5345518 bytes (99.40%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 14 lines modified | Offset 106, 33 lines modified | ||
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.1 | 111 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·install·aide | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 119 | ··package: | 135 | ··package: |
| Offset 128, 26 lines modified | Offset 147, 14 lines modified | ||
| 128 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 129 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 130 | ··-·low_complexity | 149 | ··-·low_complexity |
| 131 | ··-·low_disruption | 150 | ··-·low_disruption |
| 132 | ··-·medium_severity | 151 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 134 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 174, 14 lines modified | ||
| 167 | include·install_aide | 174 | include·install_aide |
| 168 | class·install_aide·{ | 175 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 171 | ··} | 178 | ··} |
| 172 | } | 179 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 184 | To·initiate·a·manual·check,·run·the·following·command: | 185 | To·initiate·a·manual·check,·run·the·following·command: |
| 185 | $·sudo·/usr/sbin/aide·--check | 186 | $·sudo·/usr/sbin/aide·--check |
| Offset 703, 14 lines modified | Offset 703, 33 lines modified | ||
| 703 | ··-·PCI-DSSv4-2.2.7 | 703 | ··-·PCI-DSSv4-2.2.7 |
| 704 | ··-·configure_crypto_policy | 704 | ··-·configure_crypto_policy |
| 705 | ··-·high_severity | 705 | ··-·high_severity |
| 706 | ··-·low_complexity | 706 | ··-·low_complexity |
| 707 | ··-·low_disruption | 707 | ··-·low_disruption |
| 708 | ··-·no_reboot_needed | 708 | ··-·no_reboot_needed |
| 709 | ··-·restrict_strategy | 709 | ··-·restrict_strategy |
| 710 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 711 | var_system_crypto_policy='' | ||
| 712 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 713 | rc=$? | ||
| 714 | if·test·"$rc"·=·127;·then | ||
| 715 | » echo·"$stderr_of_call"·>&2 | ||
| 716 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 717 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 718 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 719 | » false··#·end·with·an·error·code | ||
| 720 | elif·test·"$rc"·!=·0;·then | ||
| 721 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 722 | » false··#·end·with·an·error·code | ||
| 723 | fi | ||
| 710 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 711 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 405254/410869 bytes (98.63%) of diff not shown. | |||
| Offset 14306, 15 lines modified | Offset 14306, 15 lines modified | ||
| 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e80:·3032·3 | 00037e80:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16723, 131 lines modified | Offset 16723, 131 lines modified | ||
| 00041520:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00041520:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00041530:·2223·6964·6d37·3933·3922·2074·6162·696e··"#idm7939"·tabin | 00041530:·2223·6964·6d37·3933·3922·2074·6162·696e··"#idm7939"·tabin | ||
| 00041540:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00041540:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00041550:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00041550:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00041560:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00041560:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00041570:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00041570:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00041580:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00041580:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00041590:·3e52·656d·6564·6961·7469·6f6e·20 | 00041590:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 000415a0:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 000415b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000415c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000415d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000415e0:·6964·3d22·6964·6d37·3933·3922·3e3c·7461··id="idm7939"><ta | |||
| 000415f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00041600:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00041610:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00041620:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00041630:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00041640:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00041650:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041660:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00041670:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041680:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00041690:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 000416a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 000416b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 000416c0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 000416d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 000416e0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 000416f0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 00041700:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 00041710:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 00041720:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 00041730:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 00041740:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 00041750:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 00041760:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 00041770:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 00041780:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 00041790:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 000417a0:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 000417b0:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 000417c0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 000417d0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 000417e0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 000417f0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 00041800:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 00041810:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 00041820:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 00041830:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 00041840:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 00041850:·7461·7274·3d75·7064·6174·652d·6372·7970··tart=update-cryp | |||
| 00041860:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 00041870:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 00041880:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 00041890:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 000418a0:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 000418b0:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 000418c0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 000418d0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 000418e0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 000418f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00041900:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00041910:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00041920:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00041930:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00041940:·6964·6d37·3934·3022·2074·6162·696e·6465··idm7940"·tabinde | |||
| 00041950:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00041960:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00041970:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00041980:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00041990:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 000419a0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00041 | 000415a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 00041 | 000415b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00041 | 000415c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00041 | 000415d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 00041 | 000415e0:·6d37·3933·3922·3e3c·7072·653e·3c63·6f64··m7939"><pre><cod | ||
| 00041 | 000415f0:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | ||
| 00041 | 00041600:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | ||
| 00041 | 00041610:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | ||
| 00041 | 00041620:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | ||
| 00041 | 00041630:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | ||
| 00041 | 00041640:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00041 | 00041650:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 00041 | 00041660:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 00041 | 00041670:·223e·4445·4641·554c·543a·4e4f·2d53·4841··">DEFAULT:NO-SHA | ||
| 00041 | 00041680:·313c·2f61·6262·723e·270a·0a0a·7374·6465··1</abbr>'...stde | ||
| 00041 | 00041690:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | ||
| 00041 | 000416a0:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | ||
| 00041 | 000416b0:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | ||
| 00041 | 000416c0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 00041 | 000416d0:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | ||
| 00041 | 000416e0:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | ||
| 00041 | 000416f0:·290a·7263·3d24·3f0a·0a69·6620·7465·7374··).rc=$?..if·test | ||
| 00041 | 00041700:·2022·2472·6322·203d·2031·3237·3b20·7468···"$rc"·=·127;·th | ||
| 00041 | 00041710:·656e·0a09·6563·686f·2022·2473·7464·6572··en..echo·"$stder | ||
| 00041 | 00041720:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | ||
| 00041 | 00041730:·616d·703b·320a·0965·6368·6f20·224d·616b··amp;2..echo·"Mak | ||
| 00041 | 00041740:·6520·7375·7265·2074·6861·7420·7468·6520··e·sure·that·the· | ||
| 00041 | 00041750:·7363·7269·7074·2069·7320·696e·7374·616c··script·is·instal | ||
| 00041 | 00041760:·6c65·6420·6f6e·2074·6865·2072·656d·6564··led·on·the·remed | ||
| 00041 | 00041770:·6961·7465·6420·7379·7374·656d·2e22·2026··iated·system."·& | ||
| 00041 | 00041780:·6774·3b26·616d·703b·320a·0965·6368·6f20··gt;&2..echo· | ||
| 00041 | 00041790:·2253·6565·206f·7574·7075·7420·6f66·2074··"See·output·of·t | ||
| 00041 | 000417a0:·6865·2027·646e·6620·7072·6f76·6964·6573··he·'dnf·provides | ||
| 000417b0:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 000417c0:·6f6c·6963·6965·7327·2063·6f6d·6d61·6e64··olicies'·command | |||
| 000417d0:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 000417e0:·686f·2022·746f·2073·6565·2077·6861·7420··ho·"to·see·what· | |||
| 000417f0:·7061·636b·6167·6520·746f·2028·7265·2969··package·to·(re)i | |||
| Max diff block lines reached; 1749170/1767026 bytes (98.99%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:10 | 46 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 475, 14 lines modified | Offset 475, 33 lines modified | ||
| 475 | ··-·PCI-DSSv4-2.2.7 | 475 | ··-·PCI-DSSv4-2.2.7 |
| 476 | ··-·configure_crypto_policy | 476 | ··-·configure_crypto_policy |
| 477 | ··-·high_severity | 477 | ··-·high_severity |
| 478 | ··-·low_complexity | 478 | ··-·low_complexity |
| 479 | ··-·low_disruption | 479 | ··-·low_disruption |
| 480 | ··-·no_reboot_needed | 480 | ··-·no_reboot_needed |
| 481 | ··-·restrict_strategy | 481 | ··-·restrict_strategy |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 483 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 484 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 485 | rc=$? | ||
| 486 | if·test·"$rc"·=·127;·then | ||
| 487 | » echo·"$stderr_of_call"·>&2 | ||
| 488 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 489 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 490 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 491 | » false··#·end·with·an·error·code | ||
| 492 | elif·test·"$rc"·!=·0;·then | ||
| 493 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 494 | » false··#·end·with·an·error·code | ||
| 495 | fi | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 487 | --- | 501 | --- |
| 488 | apiVersion:·machineconfiguration.openshift.io/v1 | 502 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 500, 33 lines modified | Offset 519, 14 lines modified | ||
| 500 | ············Before=kubelet.service | 519 | ············Before=kubelet.service |
| 501 | ············[Service] | 520 | ············[Service] |
| 502 | ············Type=oneshot | 521 | ············Type=oneshot |
| 503 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 522 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 504 | ············RemainAfterExit=yes | 523 | ············RemainAfterExit=yes |
| 505 | ············[Install] | 524 | ············[Install] |
| 506 | ············WantedBy=multi-user.target | 525 | ············WantedBy=multi-user.target |
| 507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 508 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 509 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 510 | rc=$? | ||
| 511 | if·test·"$rc"·=·127;·then | ||
| 512 | » echo·"$stderr_of_call"·>&2 | ||
| 513 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 514 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 515 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 516 | » false··#·end·with·an·error·code | ||
| 517 | elif·test·"$rc"·!=·0;·then | ||
| 518 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 519 | » false··#·end·with·an·error·code | ||
| 520 | fi | ||
| 521 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 526 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 522 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 527 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 523 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 528 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 524 | Severity: ···medium | 529 | Severity: ···medium |
| 525 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 530 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 526 | Identifiers:·CCE-88557-4 | 531 | Identifiers:·CCE-88557-4 |
| 527 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 532 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 865, 14 lines modified | Offset 865, 33 lines modified | ||
| 865 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 865 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 866 | The·rear·package·can·be·installed·with·the·following·command: | 866 | The·rear·package·can·be·installed·with·the·following·command: |
| 867 | $·sudo·dnf·install·rear | 867 | $·sudo·dnf·install·rear |
| 868 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 868 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 869 | Severity: ···medium | 869 | Severity: ···medium |
| 870 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 870 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 871 | Identifiers:·CCE-90643-8 | 871 | Identifiers:·CCE-90643-8 |
| 872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 873 | [[packages]] | ||
| 874 | name·=·"rear" | ||
| 875 | version·=·"*" | ||
| 876 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 877 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 878 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 879 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 880 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 881 | package·--add=rear | ||
| 882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 883 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 884 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 885 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 886 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 887 | package·install·rear | ||
| 872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 873 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 874 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 875 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 876 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 877 | -·name:·Ensure·rear·is·installed | 893 | -·name:·Ensure·rear·is·installed |
| 878 | ··package: | 894 | ··package: |
| Offset 887, 26 lines modified | Offset 906, 14 lines modified | ||
| 887 | ··-·CCE-90643-8 | 906 | ··-·CCE-90643-8 |
| 888 | ··-·enable_strategy | 907 | ··-·enable_strategy |
| 889 | ··-·low_complexity | 908 | ··-·low_complexity |
| 890 | ··-·low_disruption | 909 | ··-·low_disruption |
| 891 | ··-·medium_severity | 910 | ··-·medium_severity |
| 892 | ··-·no_reboot_needed | 911 | ··-·no_reboot_needed |
| 893 | ··-·package_rear_installed | 912 | ··-·package_rear_installed |
| 894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 137686/143965 bytes (95.64%) of diff not shown. | |||
| Offset 14325, 16 lines modified | Offset 14325, 16 lines modified | ||
| 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fb0:·2028·6173·206f·6620·3230·323 | 00037fb0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037fc0:·3 | 00037fc0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16787, 130 lines modified | Offset 16787, 130 lines modified | ||
| 00041920:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00041920:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00041930:·6964·6d37·3933·3922·2074·6162·696e·6465··idm7939"·tabinde | 00041930:·6964·6d37·3933·3922·2074·6162·696e·6465··idm7939"·tabinde | ||
| 00041940:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00041940:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00041950:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00041950:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00041960:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00041960:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00041970:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00041970:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00041980:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00041980:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00041990:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | |||
| 000419a0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 000419b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000419c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000419d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 000419e0:·3d22·6964·6d37·3933·3922·3e3c·7461·626c··="idm7939"><tabl | |||
| 000419f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00041a00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00041a10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00041a20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00041a30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00041a40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00041a50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00041a60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00041a70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041a80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00041a90:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 00041aa0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00041ab0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 00041ac0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 00041ad0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00041ae0:·6f64·653e·2d2d·2d0a·6170·6956·6572·7369··ode>---.apiVersi | |||
| 00041af0:·6f6e·3a20·6d61·6368·696e·6563·6f6e·6669··on:·machineconfi | |||
| 00041b00:·6775·7261·7469·6f6e·2e6f·7065·6e73·6869··guration.openshi | |||
| 00041b10:·6674·2e69·6f2f·7631·0a6b·696e·643a·204d··ft.io/v1.kind:·M | |||
| 00041b20:·6163·6869·6e65·436f·6e66·6967·0a73·7065··achineConfig.spe | |||
| 00041b30:·633a·0a20·2063·6f6e·6669·673a·0a20·2020··c:.··config:.··· | |||
| 00041b40:·2069·676e·6974·696f·6e3a·0a20·2020·2020···ignition:.····· | |||
| 00041b50:·2076·6572·7369·6f6e·3a20·332e·312e·300a···version:·3.1.0. | |||
| 00041b60:·2020·2020·7379·7374·656d·643a·0a20·2020······systemd:.··· | |||
| 00041b70:·2020·2075·6e69·7473·3a0a·2020·2020·2020·····units:.······ | |||
| 00041b80:·2020·2d20·6e61·6d65·3a20·636f·6e66·6967····-·name:·config | |||
| 00041b90:·7572·652d·6372·7970·746f·2d70·6f6c·6963··ure-crypto-polic | |||
| 00041ba0:·792e·7365·7276·6963·650a·2020·2020·2020··y.service.······ | |||
| 00041bb0:·2020·2020·656e·6162·6c65·643a·2074·7275······enabled:·tru | |||
| 00041bc0:·650a·2020·2020·2020·2020·2020·636f·6e74··e.··········cont | |||
| 00041bd0:·656e·7473·3a20·7c0a·2020·2020·2020·2020··ents:·|.········ | |||
| 00041be0:·2020·2020·5b55·6e69·745d·0a20·2020·2020······[Unit].····· | |||
| 00041bf0:·2020·2020·2020·2042·6566·6f72·653d·6b75·········Before=ku | |||
| 00041c00:·6265·6c65·742e·7365·7276·6963·650a·2020··belet.service.·· | |||
| 00041c10:·2020·2020·2020·2020·2020·5b53·6572·7669············[Servi | |||
| 00041c20:·6365·5d0a·2020·2020·2020·2020·2020·2020··ce].············ | |||
| 00041c30:·5479·7065·3d6f·6e65·7368·6f74·0a20·2020··Type=oneshot.··· | |||
| 00041c40:·2020·2020·2020·2020·2045·7865·6353·7461···········ExecSta | |||
| 00041c50:·7274·3d75·7064·6174·652d·6372·7970·746f··rt=update-crypto | |||
| 00041c60:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | |||
| 00041c70:·7b7b·2e76·6172·5f73·7973·7465·6d5f·6372··{{.var_system_cr | |||
| 00041c80:·7970·746f·5f70·6f6c·6963·797d·7d0a·2020··ypto_policy}}.·· | |||
| 00041c90:·2020·2020·2020·2020·2020·5265·6d61·696e············Remain | |||
| 00041ca0:·4166·7465·7245·7869·743d·7965·730a·2020··AfterExit=yes.·· | |||
| 00041cb0:·2020·2020·2020·2020·2020·5b49·6e73·7461············[Insta | |||
| 00041cc0:·6c6c·5d0a·2020·2020·2020·2020·2020·2020··ll].············ | |||
| 00041cd0:·5761·6e74·6564·4279·3d6d·756c·7469·2d75··WantedBy=multi-u | |||
| 00041ce0:·7365·722e·7461·7267·6574·0a3c·2f63·6f64··ser.target.</cod | |||
| 00041cf0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00041d00:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00041d10:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00041d20:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00041d30:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00041d40:·6d37·3934·3022·2074·6162·696e·6465·783d··m7940"·tabindex= | |||
| 00041d50:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00041d60:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00041d70:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00041d80:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00041d90:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00041 | 00041990:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 00041 | 000419a0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 00041 | 000419b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 00041 | 000419c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 00041 | 000419d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 00041 | 000419e0:·3933·3922·3e3c·7072·653e·3c63·6f64·653e··939"><pre><code> | ||
| 00041 | 000419f0:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | ||
| 00041 | 00041a00:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | ||
| 00041 | 00041a10:·2074·6974·6c65·3d22·6672·6f6d·2042·656e···title="from·Ben | ||
| 00041 | 00041a20:·6368·6d61·726b·2f56·616c·7565·3a20·7863··chmark/Value:·xc | ||
| 00041 | 00041a30:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00041 | 00041a40:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | ||
| 00041 | 00041a50:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | ||
| 00041 | 00041a60:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | ||
| 00041 | 00041a70:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | ||
| 00041 | 00041a80:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | ||
| 00041 | 00041a90:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | ||
| 00041 | 00041aa0:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | ||
| 00041 | 00041ab0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 00041 | 00041ac0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | ||
| 00041 | 00041ad0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | ||
| 00041 | 00041ae0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | ||
| 00041f0 | 00041af0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | ||
| 00041 | 00041b00:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | ||
| 00041 | 00041b10:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | ||
| 00041 | 00041b20:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | ||
| 00041 | 00041b30:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | ||
| 00041 | 00041b40:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | ||
| 00041 | 00041b50:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | ||
| 00041 | 00041b60:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | ||
| 00041 | 00041b70:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | ||
| 00041 | 00041b80:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | ||
| 00041 | 00041b90:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | ||
| 00041ba0:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 00041bb0:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 00041bc0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 00041bd0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 00041be0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| Max diff block lines reached; 2640373/2658229 bytes (99.33%) of diff not shown. | |||
| Offset 48, 15 lines modified | Offset 48, 15 lines modified | ||
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act |
| 49 | ··············(HIPAA) | 49 | ··············(HIPAA) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:redhat:enterprise_linux:10 | 52 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 490, 14 lines modified | Offset 490, 33 lines modified | ||
| 490 | ··-·PCI-DSSv4-2.2.7 | 490 | ··-·PCI-DSSv4-2.2.7 |
| 491 | ··-·configure_crypto_policy | 491 | ··-·configure_crypto_policy |
| 492 | ··-·high_severity | 492 | ··-·high_severity |
| 493 | ··-·low_complexity | 493 | ··-·low_complexity |
| 494 | ··-·low_disruption | 494 | ··-·low_disruption |
| 495 | ··-·no_reboot_needed | 495 | ··-·no_reboot_needed |
| 496 | ··-·restrict_strategy | 496 | ··-·restrict_strategy |
| 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 498 | var_system_crypto_policy='DEFAULT' | ||
| 499 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 500 | rc=$? | ||
| 501 | if·test·"$rc"·=·127;·then | ||
| 502 | » echo·"$stderr_of_call"·>&2 | ||
| 503 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 504 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 505 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 506 | » false··#·end·with·an·error·code | ||
| 507 | elif·test·"$rc"·!=·0;·then | ||
| 508 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 509 | » false··#·end·with·an·error·code | ||
| 510 | fi | ||
| 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 502 | --- | 516 | --- |
| 503 | apiVersion:·machineconfiguration.openshift.io/v1 | 517 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 515, 33 lines modified | Offset 534, 14 lines modified | ||
| 515 | ············Before=kubelet.service | 534 | ············Before=kubelet.service |
| 516 | ············[Service] | 535 | ············[Service] |
| 517 | ············Type=oneshot | 536 | ············Type=oneshot |
| 518 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 537 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 519 | ············RemainAfterExit=yes | 538 | ············RemainAfterExit=yes |
| 520 | ············[Install] | 539 | ············[Install] |
| 521 | ············WantedBy=multi-user.target | 540 | ············WantedBy=multi-user.target |
| 522 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 523 | var_system_crypto_policy='DEFAULT' | ||
| 524 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 525 | rc=$? | ||
| 526 | if·test·"$rc"·=·127;·then | ||
| 527 | » echo·"$stderr_of_call"·>&2 | ||
| 528 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 529 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 530 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 531 | » false··#·end·with·an·error·code | ||
| 532 | elif·test·"$rc"·!=·0;·then | ||
| 533 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 534 | » false··#·end·with·an·error·code | ||
| 535 | fi | ||
| 536 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 541 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 537 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 542 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 538 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 543 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 539 | Severity: ···medium | 544 | Severity: ···medium |
| 540 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 545 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 541 | Identifiers:·CCE-88557-4 | 546 | Identifiers:·CCE-88557-4 |
| 542 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 547 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 633, 29 lines modified | Offset 633, 29 lines modified | ||
| 633 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) | 633 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4,·SC-5(2) |
| 634 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 | 634 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-4,·PR.PT-1,·PR.PT-4 |
| 635 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 635 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 636 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 | 636 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000341-GPOS-00132,·SRG-OS-000480-GPOS-00227 |
| 637 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 | 637 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000357-CTR-000800 |
| 638 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 638 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 639 | ·············_\x8c_\x8i_\x8s············1.1.2.7.1 | 639 | ·············_\x8c_\x8i_\x8s············1.1.2.7.1 |
| 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 641 | logvol·/var/log/audit·10240 | ||
| 642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 643 | [[customizations.filesystem]] | 641 | [[customizations.filesystem]] |
| 644 | mountpoint·=·"/var/log/audit" | 642 | mountpoint·=·"/var/log/audit" |
| 645 | size·=·10737418240 | 643 | size·=·10737418240 |
| 646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 651 | part·/var/log/audit | 649 | part·/var/log/audit |
| 650 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 651 | logvol·/var/log/audit·10240 | ||
| 652 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules | 652 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules |
| 653 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 653 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 654 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. | 654 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. |
| 655 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. | 655 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. |
| 656 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules | 656 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules |
| Offset 1564, 14 lines modified | Offset 1564, 25 lines modified | ||
| 1564 | Identifiers:·CCE-90212-2 | 1564 | Identifiers:·CCE-90212-2 |
| 1565 | ·············_\x8c_\x8u_\x8i····3.4.5 | 1565 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 1566 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1566 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1567 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1567 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1568 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1568 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1569 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1569 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1570 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1570 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1571 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1572 | [customizations.services] | ||
| Max diff block lines reached; 189323/196281 bytes (96.46%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2028·6173·206f·6620·3230·323 | 00037ef0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037f00:·3 | 00037f00:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16533, 235 lines modified | Offset 16533, 235 lines modified | ||
| 00040940:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00040940:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00040950:·743d·2223·6964·6d37·3235·3022·2074·6162··t="#idm7250"·tab | 00040950:·743d·2223·6964·6d37·3235·3022·2074·6162··t="#idm7250"·tab | ||
| 00040960:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00040960:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00040970:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00040970:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00040980:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00040980:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00040990:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00040990:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 000409a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 000409a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 000409b0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 000409b0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 000409c0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 000409c0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 000409d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 000409e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 000409f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040a00:·643d·2269·646d·3732·3530·223e·3c74·6162··d="idm7250"><tab | |||
| 00040a10:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040a20:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040a30:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040a40:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040a50:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00040a60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040a70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00040a80:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00040a90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040aa0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040ab0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00040ac0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00040ad0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00040ae0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00040af0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00040b00:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 00040b10:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 00040b20:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 00040b30:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 00040b40:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 00040b50:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 00040b60:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 00040b70:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 00040b80:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 00040b90:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 00040ba0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 00040bb0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 00040bc0:·3930·3437·372d·310a·2020·2d20·434a·4953··90477-1.··-·CJIS | |||
| 00040bd0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 00040be0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 00040bf0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 00040c00:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 00040c10:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 00040c20:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 00040c30:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 00040c40:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 00040c50:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 00040c60:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 00040c70:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 00040c80:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 00040c90:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 00040ca0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040cb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040cc0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040cd0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040ce0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040cf0:·3732·3531·2220·7461·6269·6e64·6578·3d22··7251"·tabindex=" | |||
| 00040d00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040d10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040d20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040d30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040d40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040d50:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 00040d60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040d70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040d80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040d90:·643d·2269·646d·3732·3531·223e·3c74·6162··d="idm7251"><tab | |||
| 00040da0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040db0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040dc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040dd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040de0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00040df0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040e00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00040e10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00040e20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040e30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040e40:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00040e50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00040e60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00040e70:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00040e80:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00040e90:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 00040ea0:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 00040eb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040ec0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040ed0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040ee0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040ef0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040f00:·3732·3532·2220·7461·6269·6e64·6578·3d22··7252"·tabindex=" | |||
| 00040f10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040f20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040f30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040f40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040f50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040f60:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 00040f70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00040f80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040f90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040fa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040fb0:·2220·6964·3d22·6964·6d37·3235·3222·3e3c··"·id="idm7252">< | |||
| 00040fc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00040fd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00040fe0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 00040ff0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 00041000:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| Max diff block lines reached; 2507463/2539809 bytes (98.73%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Base | 46 | ··············Base |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 429, 14 lines modified | Offset 429, 33 lines modified | ||
| 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 434 | ·············_\x8c_\x8i_\x8s············6.1.1 | 434 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | [[packages]] | ||
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | package·--add=aide | ||
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 451 | package·install·aide | ||
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 441 | -·name:·Ensure·aide·is·installed | 457 | -·name:·Ensure·aide·is·installed |
| 442 | ··package: | 458 | ··package: |
| Offset 451, 26 lines modified | Offset 470, 14 lines modified | ||
| 451 | ··-·PCI-DSSv4-11.5.2 | 470 | ··-·PCI-DSSv4-11.5.2 |
| 452 | ··-·enable_strategy | 471 | ··-·enable_strategy |
| 453 | ··-·low_complexity | 472 | ··-·low_complexity |
| 454 | ··-·low_disruption | 473 | ··-·low_disruption |
| 455 | ··-·medium_severity | 474 | ··-·medium_severity |
| 456 | ··-·no_reboot_needed | 475 | ··-·no_reboot_needed |
| 457 | ··-·package_aide_installed | 476 | ··-·package_aide_installed |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 463 | package·install·aide | ||
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 465 | [[packages]] | ||
| 466 | name·=·"aide" | ||
| 467 | version·=·"*" | ||
| 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 473 | #·Remediation·is·applicable·only·in·certain·platforms | 482 | #·Remediation·is·applicable·only·in·certain·platforms |
| 474 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 483 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 490, 21 lines modified | Offset 497, 14 lines modified | ||
| 490 | include·install_aide | 497 | include·install_aide |
| 491 | class·install_aide·{ | 498 | class·install_aide·{ |
| 492 | ··package·{·'aide': | 499 | ··package·{·'aide': |
| 493 | ····ensure·=>·'installed', | 500 | ····ensure·=>·'installed', |
| 494 | ··} | 501 | ··} |
| 495 | } | 502 | } |
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 501 | package·--add=aide | ||
| 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 503 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 504 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 505 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 506 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 507 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 621, 14 lines modified | Offset 621, 18 lines modified | ||
| 621 | Identifiers:·CCE-86982-6 | 621 | Identifiers:·CCE-86982-6 |
| 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 623 | ·············_\x8i_\x8s_\x8m······1446 | 623 | ·············_\x8i_\x8s_\x8m······1446 |
| 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 629 | [customizations] | ||
| 630 | fips·=·true | ||
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 634 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 635 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 633 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 636 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 634 | ··set_fact: | 637 | ··set_fact: |
| Offset 728, 18 lines modified | Offset 732, 14 lines modified | ||
| 728 | ··-·NIST-800-53-SC-13 | 732 | ··-·NIST-800-53-SC-13 |
| 729 | ··-·enable_fips_mode | 733 | ··-·enable_fips_mode |
| 730 | ··-·high_severity | 734 | ··-·high_severity |
| 731 | ··-·medium_complexity | 735 | ··-·medium_complexity |
| 732 | ··-·medium_disruption | 736 | ··-·medium_disruption |
| 733 | ··-·reboot_required | 737 | ··-·reboot_required |
| 734 | ··-·restrict_strategy | 738 | ··-·restrict_strategy |
| 735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 212703/219122 bytes (97.07%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f40:·3 | 00037f40:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 16537, 235 lines modified | Offset 16537, 235 lines modified | ||
| 00040980:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040980:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040990:·3d22·2369·646d·3732·3530·2220·7461·6269··="#idm7250"·tabi | 00040990:·3d22·2369·646d·3732·3530·2220·7461·6269··="#idm7250"·tabi | ||
| 000409a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 000409a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 000409b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 000409b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 000409c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 000409c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 000409d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 000409d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 000409e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 000409e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 000409f0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 000409f0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00040a00:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00040a10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040a | 00040a00:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 00040a10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040a20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040a30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040a40:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040a50:·3235·3022·3e3c·7072·653e·3c63·6f64·653e··250"><pre><code> | |||
| 00040a60:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00040a70:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 00040a80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00040a90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040aa0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040ab0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040ac0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040ad0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040ae0:·3732·3531·2220·7461·6269·6e64·6578·3d22··7251"·tabindex=" | |||
| 00040af0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040b00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040b10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040b20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040b30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040b40:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 00040b50:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00040b60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040 | 00040b70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 00040b80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040b90:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | |||
| 00040ba0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040bb0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040bc0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040bd0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040be0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040a40:·3d22·6964·6d37·3235·3022·3e3c·7461·626c··="idm7250"><tabl | |||
| 00040a50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040a60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040a70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040a80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040a90:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040aa0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040ab0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040ac0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040 | 00040bf0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 00040ae0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040 | 00040c00:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 00040c10:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040 | 00040c20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00040c30:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040c40:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040c50:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00040c60:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00040c70:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00040c80:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 00040c90:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 00040ca0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00040cb0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040cc0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040cd0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040b10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040b20:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040b30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040b40:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00040b50:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00040b60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00040b70:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00040b80:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00040b90:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 00040ba0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00040bb0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00040bc0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00040bd0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00040be0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00040bf0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 00040c00:·3034·3737·2d31·0a20·202d·2043·4a49·532d··0477-1.··-·CJIS- | |||
| 00040c10:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 00040c20:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 00040c30:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 00040c40:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 00040c50:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 00040c60:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00040c70:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00040c80:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00040c90:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00040ca0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00040cb0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00040cc0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 00040cd0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00040ce0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040cf0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040 | 00040ce0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 00040cf0:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 00040d00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040d10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040d20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040d30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040d40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040d50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040d60:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00040d70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040d | 00040d80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00040d90:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 00040da0:·3532·223e·3c74·6162·6c65·2063·6c61·7373··52"><table·class | |||
| Max diff block lines reached; 2507739/2540085 bytes (98.73%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 47 | ··············Secret | 47 | ··············Secret |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 430, 14 lines modified | Offset 430, 33 lines modified | ||
| 430 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 430 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 431 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 431 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 433 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 433 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 434 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 434 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 435 | ·············_\x8c_\x8i_\x8s············6.1.1 | 435 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 436 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 436 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | [[packages]] | ||
| 439 | name·=·"aide" | ||
| 440 | version·=·"*" | ||
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 446 | package·--add=aide | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 452 | package·install·aide | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 442 | -·name:·Ensure·aide·is·installed | 458 | -·name:·Ensure·aide·is·installed |
| 443 | ··package: | 459 | ··package: |
| Offset 452, 26 lines modified | Offset 471, 14 lines modified | ||
| 452 | ··-·PCI-DSSv4-11.5.2 | 471 | ··-·PCI-DSSv4-11.5.2 |
| 453 | ··-·enable_strategy | 472 | ··-·enable_strategy |
| 454 | ··-·low_complexity | 473 | ··-·low_complexity |
| 455 | ··-·low_disruption | 474 | ··-·low_disruption |
| 456 | ··-·medium_severity | 475 | ··-·medium_severity |
| 457 | ··-·no_reboot_needed | 476 | ··-·no_reboot_needed |
| 458 | ··-·package_aide_installed | 477 | ··-·package_aide_installed |
| 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 464 | package·install·aide | ||
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 466 | [[packages]] | ||
| 467 | name·=·"aide" | ||
| 468 | version·=·"*" | ||
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 470 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 471 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 472 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 473 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 474 | #·Remediation·is·applicable·only·in·certain·platforms | 483 | #·Remediation·is·applicable·only·in·certain·platforms |
| 475 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 484 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 491, 21 lines modified | Offset 498, 14 lines modified | ||
| 491 | include·install_aide | 498 | include·install_aide |
| 492 | class·install_aide·{ | 499 | class·install_aide·{ |
| 493 | ··package·{·'aide': | 500 | ··package·{·'aide': |
| 494 | ····ensure·=>·'installed', | 501 | ····ensure·=>·'installed', |
| 495 | ··} | 502 | ··} |
| 496 | } | 503 | } |
| 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 502 | package·--add=aide | ||
| 503 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 504 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 504 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 505 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 505 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 506 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 506 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 507 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 507 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 508 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Identifiers:·CCE-86982-6 | 622 | Identifiers:·CCE-86982-6 |
| 623 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ·············_\x8i_\x8s_\x8m······1446 | 624 | ·············_\x8i_\x8s_\x8m······1446 |
| 625 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 630 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 631 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 632 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 633 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 634 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 637 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 635 | ··set_fact: | 638 | ··set_fact: |
| Offset 729, 18 lines modified | Offset 733, 14 lines modified | ||
| 729 | ··-·NIST-800-53-SC-13 | 733 | ··-·NIST-800-53-SC-13 |
| 730 | ··-·enable_fips_mode | 734 | ··-·enable_fips_mode |
| 731 | ··-·high_severity | 735 | ··-·high_severity |
| 732 | ··-·medium_complexity | 736 | ··-·medium_complexity |
| 733 | ··-·medium_disruption | 737 | ··-·medium_disruption |
| 734 | ··-·reboot_required | 738 | ··-·reboot_required |
| 735 | ··-·restrict_strategy | 739 | ··-·restrict_strategy |
| 736 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 212703/219131 bytes (97.07%) of diff not shown. | |||
| Offset 14315, 15 lines modified | Offset 14315, 15 lines modified | ||
| 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037f10:·3032·3 | 00037f10:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16535, 235 lines modified | Offset 16535, 235 lines modified | ||
| 00040960:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 00040960:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 00040970:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 00040970:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 00040980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00040980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00040990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00040990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000409a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000409a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000409b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000409b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000409c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000409c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000409d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000409e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000409f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040a00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040a10:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 00040a20:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 00040a30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040a40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040a50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040a60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040a70:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040a80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040 | 000409d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 000409e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 000409f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040a00:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040a10:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040a20:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | |||
| 00040a30:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00040a40:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 00040a50:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 00040a60:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00040a70:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040a80:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040a90:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040aa0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040ab0:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 00040ac0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040ad0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040ae0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040af0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040b00:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040b10:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040b20:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 00040b30:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040b40:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040b50:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040b60:·2069·643d·2269·646d·3732·3531·223e·3c74···id="idm7251"><t | |||
| 00040b70:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00040b80:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00040b90:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00040ba0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00040bb0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00040 | 00040bc0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 00040 | 00040bd0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00040ac0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040ad0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040 | 00040be0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 00040bf0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040c00:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00040 | 00040c10:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 00040b00:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040b10:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00040b20:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 00040b30:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00040b40:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00040b50:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 00040b60:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 00040b70:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00040b80:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 00040b90:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00040ba0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00040bb0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00040bc0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 00040bd0:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 00040be0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 00040bf0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00040c00:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00040c10:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00040c20:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00040c30:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040c40:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040c50:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040c60:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040c70:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040c80:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040c90:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 00040ca0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 00040cb0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040cc0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040cd0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00040ce0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00040cf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00040d00:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 00040d10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00040d20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00040d30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040d40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040d50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040d60:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 00040d70:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 00040d80:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040d90:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040da0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 00040db0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 00040dc0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040dd0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040de0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040df0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040e00:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040e10:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040e20:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040e30:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040 | 00040c20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| Max diff block lines reached; 2506704/2538912 bytes (98.73%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Top·Secret | 46 | ··············Top·Secret |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 429, 14 lines modified | Offset 429, 33 lines modified | ||
| 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 434 | ·············_\x8c_\x8i_\x8s············6.1.1 | 434 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | [[packages]] | ||
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | package·--add=aide | ||
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 451 | package·install·aide | ||
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 441 | -·name:·Ensure·aide·is·installed | 457 | -·name:·Ensure·aide·is·installed |
| 442 | ··package: | 458 | ··package: |
| Offset 451, 26 lines modified | Offset 470, 14 lines modified | ||
| 451 | ··-·PCI-DSSv4-11.5.2 | 470 | ··-·PCI-DSSv4-11.5.2 |
| 452 | ··-·enable_strategy | 471 | ··-·enable_strategy |
| 453 | ··-·low_complexity | 472 | ··-·low_complexity |
| 454 | ··-·low_disruption | 473 | ··-·low_disruption |
| 455 | ··-·medium_severity | 474 | ··-·medium_severity |
| 456 | ··-·no_reboot_needed | 475 | ··-·no_reboot_needed |
| 457 | ··-·package_aide_installed | 476 | ··-·package_aide_installed |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 463 | package·install·aide | ||
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 465 | [[packages]] | ||
| 466 | name·=·"aide" | ||
| 467 | version·=·"*" | ||
| 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 473 | #·Remediation·is·applicable·only·in·certain·platforms | 482 | #·Remediation·is·applicable·only·in·certain·platforms |
| 474 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 483 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 490, 21 lines modified | Offset 497, 14 lines modified | ||
| 490 | include·install_aide | 497 | include·install_aide |
| 491 | class·install_aide·{ | 498 | class·install_aide·{ |
| 492 | ··package·{·'aide': | 499 | ··package·{·'aide': |
| 493 | ····ensure·=>·'installed', | 500 | ····ensure·=>·'installed', |
| 494 | ··} | 501 | ··} |
| 495 | } | 502 | } |
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 501 | package·--add=aide | ||
| 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 503 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 504 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 505 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 506 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 507 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 621, 14 lines modified | Offset 621, 18 lines modified | ||
| 621 | Identifiers:·CCE-86982-6 | 621 | Identifiers:·CCE-86982-6 |
| 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 623 | ·············_\x8i_\x8s_\x8m······1446 | 623 | ·············_\x8i_\x8s_\x8m······1446 |
| 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 629 | [customizations] | ||
| 630 | fips·=·true | ||
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 634 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 635 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 633 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 636 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 634 | ··set_fact: | 637 | ··set_fact: |
| Offset 728, 18 lines modified | Offset 732, 14 lines modified | ||
| 728 | ··-·NIST-800-53-SC-13 | 732 | ··-·NIST-800-53-SC-13 |
| 729 | ··-·enable_fips_mode | 733 | ··-·enable_fips_mode |
| 730 | ··-·high_severity | 734 | ··-·high_severity |
| 731 | ··-·medium_complexity | 735 | ··-·medium_complexity |
| 732 | ··-·medium_disruption | 736 | ··-·medium_disruption |
| 733 | ··-·reboot_required | 737 | ··-·reboot_required |
| 734 | ··-·restrict_strategy | 738 | ··-·restrict_strategy |
| 735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 212703/219139 bytes (97.06%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e90:·6f66·2032·3032·3 | 00037e90:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16516, 235 lines modified | Offset 16516, 235 lines modified | ||
| 00040830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00040830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00040840:·6d37·3235·3022·2074·6162·696e·6465·783d··m7250"·tabindex= | 00040840:·6d37·3235·3022·2074·6162·696e·6465·783d··m7250"·tabindex= | ||
| 00040850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00040850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00040860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00040860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00040870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00040870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00040880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00040880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00040890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00040890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 000408a0:·6564·6961·7469·6f6e·204 | 000408a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 000408b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000408c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000408d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000408e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000408f0:·3732·3530·223e·3c74·6162·6c65·2063·6c61··7250"><table·cla | |||
| 00040900:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040910:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040920:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040930:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040 | 000408b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 000408c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000408d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000408e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000408f0:·6522·2069·643d·2269·646d·3732·3530·223e··e"·id="idm7250"> | |||
| 00040900:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 00040910:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00040920:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 00040930:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 00040940:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040950:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040960:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040970:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040980:·6172·6765·743d·2223·6964·6d37·3235·3122··arget="#idm7251" | |||
| 00040990:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000409a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000409b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000409c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000409d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000409e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 000409f0:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 00040a00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00040a10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00040a20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00040a30:·7365·2220·6964·3d22·6964·6d37·3235·3122··se"·id="idm7251" | |||
| 00040a40:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00040a50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00040a60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00040a70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00040a80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00040a90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00040aa0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00040ab0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00040 | 00040ac0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 00040 | 00040ad0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 00040ae0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00040af0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00040b00:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00040b10:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00040b20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00040b30:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 00040b40:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 00040b50:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00040b60:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00040b70:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00040b80:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00040ba0:·6964·6d37·3235·3222·2074·6162·696e·6465··idm7252"·tabinde | |||
| 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00040c00:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 00040c10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040c20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040c30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040c40:·2220·6964·3d22·6964·6d37·3235·3222·3e3c··"·id="idm7252">< | |||
| 00040c50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040c60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00040c70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00040c80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00040c90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00040 | 00040ca0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 00040 | 00040cb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00040cc0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00040990:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 000409a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 000409b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 000409c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 000409d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000409e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000409f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 00040a00:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 00040a10:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00040a20:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 00040a30:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00040a40:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00040a50:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00040a60:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00040a70:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00040a80:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00040a90:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00040aa0:·3a0a·2020·2d20·4343·452d·3930·3437·372d··:.··-·CCE-90477- | |||
| 00040ab0:·310a·2020·2d20·434a·4953·2d35·2e31·302e··1.··-·CJIS-5.10. | |||
| 00040ac0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 00040ad0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00040ae0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 00040af0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 00040b00:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 00040b10:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00040b20:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00040b30:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00040b40:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| Max diff block lines reached; 2851284/2883492 bytes (98.88%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise |
| 45 | ··············Linux·10 | 45 | ··············Linux·10 |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:10 | 48 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 426, 14 lines modified | Offset 426, 33 lines modified | ||
| 426 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 426 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 427 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 427 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 428 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 428 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 429 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 429 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 430 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 430 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 431 | ·············_\x8c_\x8i_\x8s············6.1.1 | 431 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 434 | [[packages]] | ||
| 435 | name·=·"aide" | ||
| 436 | version·=·"*" | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 442 | package·--add=aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package·install·aide | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 438 | -·name:·Ensure·aide·is·installed | 454 | -·name:·Ensure·aide·is·installed |
| 439 | ··package: | 455 | ··package: |
| Offset 448, 26 lines modified | Offset 467, 14 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 467 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·enable_strategy | 468 | ··-·enable_strategy |
| 450 | ··-·low_complexity | 469 | ··-·low_complexity |
| 451 | ··-·low_disruption | 470 | ··-·low_disruption |
| 452 | ··-·medium_severity | 471 | ··-·medium_severity |
| 453 | ··-·no_reboot_needed | 472 | ··-·no_reboot_needed |
| 454 | ··-·package_aide_installed | 473 | ··-·package_aide_installed |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 460 | package·install·aide | ||
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 462 | [[packages]] | ||
| 463 | name·=·"aide" | ||
| 464 | version·=·"*" | ||
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 470 | #·Remediation·is·applicable·only·in·certain·platforms | 479 | #·Remediation·is·applicable·only·in·certain·platforms |
| 471 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 480 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 487, 21 lines modified | Offset 494, 14 lines modified | ||
| 487 | include·install_aide | 494 | include·install_aide |
| 488 | class·install_aide·{ | 495 | class·install_aide·{ |
| 489 | ··package·{·'aide': | 496 | ··package·{·'aide': |
| 490 | ····ensure·=>·'installed', | 497 | ····ensure·=>·'installed', |
| 491 | ··} | 498 | ··} |
| 492 | } | 499 | } |
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 498 | package·--add=aide | ||
| 499 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 500 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 500 | Run·the·following·command·to·generate·a·new·database: | 501 | Run·the·following·command·to·generate·a·new·database: |
| 501 | $·sudo·/usr/sbin/aide·--init | 502 | $·sudo·/usr/sbin/aide·--init |
| 502 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 503 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 503 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 504 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 504 | To·initiate·a·manual·check,·run·the·following·command: | 505 | To·initiate·a·manual·check,·run·the·following·command: |
| 505 | $·sudo·/usr/sbin/aide·--check | 506 | $·sudo·/usr/sbin/aide·--check |
| Offset 852, 14 lines modified | Offset 852, 33 lines modified | ||
| 852 | ··-·PCI-DSSv4-2.2.7 | 852 | ··-·PCI-DSSv4-2.2.7 |
| 853 | ··-·configure_crypto_policy | 853 | ··-·configure_crypto_policy |
| 854 | ··-·high_severity | 854 | ··-·high_severity |
| 855 | ··-·low_complexity | 855 | ··-·low_complexity |
| 856 | ··-·low_disruption | 856 | ··-·low_disruption |
| 857 | ··-·no_reboot_needed | 857 | ··-·no_reboot_needed |
| 858 | ··-·restrict_strategy | 858 | ··-·restrict_strategy |
| 859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 860 | var_system_crypto_policy='DEFAULT' | ||
| 861 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 862 | rc=$? | ||
| 863 | if·test·"$rc"·=·127;·then | ||
| 864 | » echo·"$stderr_of_call"·>&2 | ||
| 865 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 866 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 867 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 868 | » false··#·end·with·an·error·code | ||
| 869 | elif·test·"$rc"·!=·0;·then | ||
| 870 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 871 | » false··#·end·with·an·error·code | ||
| 872 | fi | ||
| 859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 873 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 874 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 220932/226537 bytes (97.53%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e50:·3 | 00037e50:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15130, 234 lines modified | Offset 15130, 234 lines modified | ||
| 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | ||
| 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b200:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b200:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b210:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b220:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b230:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b240:·2220·6964·3d22·6964·6d37·3235·3022·3e3c··"·id="idm7250">< | |||
| 0003b250:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b260:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b270:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b280:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b290:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b2d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b300:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b310:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b320:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b330:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b340:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b350:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b360:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b370:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b380:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b390:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b3a0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b3b0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b3c0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b3d0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b3e0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b3f0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b400:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b410:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b420:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b430:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b440:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b450:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b460:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b470:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b480:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b490:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b4a0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b4b0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b4c0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4d0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b500:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b510:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b520:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b530:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b540:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b550:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b560:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b570:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b580:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b590:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003b5a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b5b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b5c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b5d0:·2220·6964·3d22·6964·6d37·3235·3122·3e3c··"·id="idm7251">< | |||
| 0003b5e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b600:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b610:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b620:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b630:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b640:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b650:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b660:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b670:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b680:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b690:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b6a0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b6b0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b6c0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b6d0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b6e0:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003b6f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b700:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b710:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b720:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b730:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b740:·6964·6d37·3235·3222·2074·6162·696e·6465··idm7252"·tabinde | |||
| 0003b750:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b760:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b770:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b780:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b790:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b7a0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b7b0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b7c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b7d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b7e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b7f0:·7073·6522·2069·643d·2269·646d·3732·3532··pse"·id="idm7252 | |||
| 0003b800:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b810:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b820:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b830:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b840:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b850:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| Max diff block lines reached; 5368839/5401047 bytes (99.40%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:10 | 45 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 33 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 118 | ··package: | 134 | ··package: |
| Offset 127, 26 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 173, 14 lines modified | ||
| 166 | include·install_aide | 173 | include·install_aide |
| 167 | class·install_aide·{ | 174 | class·install_aide·{ |
| 168 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 169 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 170 | ··} | 177 | ··} |
| 171 | } | 178 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 180 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 180 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 181 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 181 | Severity: ···medium | 182 | Severity: ···medium |
| 182 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 183 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 183 | Identifiers:·CCE-86441-3 | 184 | Identifiers:·CCE-86441-3 |
| 184 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 185 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| Offset 1725, 14 lines modified | Offset 1725, 18 lines modified | ||
| 1725 | Identifiers:·CCE-86982-6 | 1725 | Identifiers:·CCE-86982-6 |
| 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1727 | ·············_\x8i_\x8s_\x8m······1446 | 1727 | ·············_\x8i_\x8s_\x8m······1446 |
| 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1733 | [customizations] | ||
| 1734 | fips·=·true | ||
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1733 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1736 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1734 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1737 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1735 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1738 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1736 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1739 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1737 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1740 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1738 | ··set_fact: | 1741 | ··set_fact: |
| Offset 1832, 18 lines modified | Offset 1836, 14 lines modified | ||
| 1832 | ··-·NIST-800-53-SC-13 | 1836 | ··-·NIST-800-53-SC-13 |
| 1833 | ··-·enable_fips_mode | 1837 | ··-·enable_fips_mode |
| 1834 | ··-·high_severity | 1838 | ··-·high_severity |
| 1835 | ··-·medium_complexity | 1839 | ··-·medium_complexity |
| 1836 | ··-·medium_disruption | 1840 | ··-·medium_disruption |
| 1837 | ··-·reboot_required | 1841 | ··-·reboot_required |
| 1838 | ··-·restrict_strategy | 1842 | ··-·restrict_strategy |
| 1839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 496024/502726 bytes (98.67%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·313 | 00037e50:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15130, 235 lines modified | Offset 15130, 235 lines modified | ||
| 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b200:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b210:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b200:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b210:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b220:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b230:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b240:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b250:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b260:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b270:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b280:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b290:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b2b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b2f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b300:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b310:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b320:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b330:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b340:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b350:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b360:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b370:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b380:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b390:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b3a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b3b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b3c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b3d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b3e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b3f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b400:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b410:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b430:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b440:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b450:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b460:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b470:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b480:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b490:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b4b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b4c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b4d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b4e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b4f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b500:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b510:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b520:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b530:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 0003b540:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b550:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b560:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b570:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b580:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b590:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b5a0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b5b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5d0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b5e0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003b5f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b600:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b610:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b620:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b630:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b640:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b650:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b660:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b670:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b680:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b690:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b6a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b6b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b6c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b6d0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003b6e0:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003b6f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b700:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b710:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b720:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b730:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b740:·743d·2223·6964·6d37·3235·3222·2074·6162··t="#idm7252"·tab | |||
| 0003b750:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b760:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b770:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b780:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b790:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b7a0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b7b0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b7c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b7d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b7e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b7f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b800:·3732·3532·223e·3c70·7265·3e3c·636f·6465··7252"><pre><code | |||
| 0003b810:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b820:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b830:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b840:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| Max diff block lines reached; 5310681/5343027 bytes (99.39%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:10 | 45 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 33 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 118 | ··package: | 134 | ··package: |
| Offset 127, 26 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 173, 14 lines modified | ||
| 166 | include·install_aide | 173 | include·install_aide |
| 167 | class·install_aide·{ | 174 | class·install_aide·{ |
| 168 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 169 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 170 | ··} | 177 | ··} |
| 171 | } | 178 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 180 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 180 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 181 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 181 | Severity: ···medium | 182 | Severity: ···medium |
| 182 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 183 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 183 | Identifiers:·CCE-86441-3 | 184 | Identifiers:·CCE-86441-3 |
| 184 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 185 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| Offset 1725, 14 lines modified | Offset 1725, 18 lines modified | ||
| 1725 | Identifiers:·CCE-86982-6 | 1725 | Identifiers:·CCE-86982-6 |
| 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1727 | ·············_\x8i_\x8s_\x8m······1446 | 1727 | ·············_\x8i_\x8s_\x8m······1446 |
| 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1733 | [customizations] | ||
| 1734 | fips·=·true | ||
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1733 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1736 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1734 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1737 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1735 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1738 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1736 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1739 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1737 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1740 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1738 | ··set_fact: | 1741 | ··set_fact: |
| Offset 1832, 18 lines modified | Offset 1836, 14 lines modified | ||
| 1832 | ··-·NIST-800-53-SC-13 | 1836 | ··-·NIST-800-53-SC-13 |
| 1833 | ··-·enable_fips_mode | 1837 | ··-·enable_fips_mode |
| 1834 | ··-·high_severity | 1838 | ··-·high_severity |
| 1835 | ··-·medium_complexity | 1839 | ··-·medium_complexity |
| 1836 | ··-·medium_disruption | 1840 | ··-·medium_disruption |
| 1837 | ··-·reboot_required | 1841 | ··-·reboot_required |
| 1838 | ··-·restrict_strategy | 1842 | ··-·restrict_strategy |
| 1839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 490305/497011 bytes (98.65%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038790:·7320·6f66·2032·3032·3 | 00038790:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15247, 237 lines modified | Offset 15247, 237 lines modified | ||
| 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | ||
| 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b950:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b950:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b960:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b970:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b980:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b990:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b9a0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003b960:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b970:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b980:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b990:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9a0:·2269·646d·3739·3830·223e·3c74·6162·6c65··"idm7980"><table | |||
| 0003b9b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b9c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b9d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b9e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba10:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ba20:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ba30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ba40:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba50:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ba60:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ba70:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ba80:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ba90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003baa0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003bab0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bac0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bad0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bae0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003baf0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bb00:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003bb10:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003bb20:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003bb30:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003bb40:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003bb50:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003bb60:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003bb70:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003bb80:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003bb90:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003bba0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003bbb0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003bbc0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003bbd0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003bbe0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003bbf0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003bc00:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003bc10:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003bc20:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003bc30:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003bc40:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003bc50:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003bc60:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bc70:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bc80:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bc90:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bca0:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003bcb0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bcc0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bcd0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bce0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bcf0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd00:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd10:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003bd20:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bd30:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bd40:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bd50:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | |||
| 0003bd60:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bd70:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bd80:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bd90:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bda0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bdb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bdc0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003bdd0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003bde0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bdf0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003be00:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003be10:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003be20:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003be30:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b | 0003b9b0:·3830·223e·3c70·7265·3e3c·636f·6465·3e0a··80"><pre><code>. | ||
| 0003b9c0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b9d0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b9e0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003be50:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003be60:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003be70:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003be80:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003be90:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bea0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003beb0:·6172·6765·743d·2223·6964·6d37·3938·3222··arget="#idm7982" | |||
| 0003bec0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bed0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bee0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bef0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bf00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bf10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bf20:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003bf30:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bf40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| Max diff block lines reached; 3963655/3996139 bytes (99.19%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 115, 14 lines modified | Offset 115, 33 lines modified | ||
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8c_\x8i_\x8s············5.3.1 | 119 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·install·aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Ensure·aide·is·installed | 143 | -·name:·Ensure·aide·is·installed |
| 128 | ··package: | 144 | ··package: |
| Offset 138, 26 lines modified | Offset 157, 14 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 159 | ··-·low_complexity |
| 141 | ··-·low_disruption | 160 | ··-·low_disruption |
| 142 | ··-·medium_severity | 161 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package·install·aide | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | 169 | #·Remediation·is·applicable·only·in·certain·platforms |
| 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 177, 21 lines modified | Offset 184, 14 lines modified | ||
| 177 | include·install_aide | 184 | include·install_aide |
| 178 | class·install_aide·{ | 185 | class·install_aide·{ |
| 179 | ··package·{·'aide': | 186 | ··package·{·'aide': |
| 180 | ····ensure·=>·'installed', | 187 | ····ensure·=>·'installed', |
| 181 | ··} | 188 | ··} |
| 182 | } | 189 | } |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 194 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 195 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 352, 95 lines modified | Offset 352, 95 lines modified | ||
| 352 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 352 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 353 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 353 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 355 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010800 | 355 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010800 |
| 356 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 356 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 357 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 357 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 358 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 358 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | logvol·/home·1024 | ||
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 362 | [[customizations.filesystem]] | 360 | [[customizations.filesystem]] |
| 363 | mountpoint·=·"/home" | 361 | mountpoint·=·"/home" |
| 364 | size·=·1073741824 | 362 | size·=·1073741824 |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 370 | part·/home | 368 | part·/home |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 370 | logvol·/home·1024 | ||
| 371 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 371 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 372 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. | 372 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. |
| 373 | Rationale:···The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. | 373 | Rationale:···The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. |
| Max diff block lines reached; 247089/253089 bytes (97.63%) of diff not shown. | |||
| Offset 14450, 15 lines modified | Offset 14450, 15 lines modified | ||
| 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038780:·7320·6f66·2032·3032·3 | 00038780:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15253, 236 lines modified | Offset 15253, 236 lines modified | ||
| 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | ||
| 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b9b0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b9c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d37·3938·3022·3e3c·7072·653e·3c63·6f64··m7980"><pre><cod | |||
| 0003ba10:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003ba20:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003ba30:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b9b0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b9c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b9d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b9e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b9f0:·6964·3d22·6964·6d37·3938·3022·3e3c·7461··id="idm7980"><ta | |||
| 0003ba00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ba10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ba20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ba30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ba40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ba50:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ba60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba70:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ba80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba90:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003baa0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003bab0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bac0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bad0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bae0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003baf0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003bb00:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003bb10:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003bb20:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003bb30:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003bb40:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003bb50:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003bb60:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003bb70:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003bb80:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003bb90:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003bba0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003bbb0:·2d38·3038·3434·2d34·0a20·202d·2043·4a49··-80844-4.··-·CJI | |||
| 0003bbc0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003bbd0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003bbe0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003bbf0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bc00:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bc10:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bc20:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bc30:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bc40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bc50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003bc60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003bc70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003bc80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bc90:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bca0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003bcb0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bcc0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bcd0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bce0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bcf0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bd00:·3831·2220·7461·6269·6e64·6578·3d22·3022··81"·tabindex="0" | |||
| 0003bd10:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bd20:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bd30:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bd40:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bd50:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bd60:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003bd70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bd80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bd90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bda0:·2269·646d·3739·3831·223e·3c74·6162·6c65··"idm7981"><table | |||
| 0003bdb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bdc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bdd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bde0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bdf0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003be00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003be10:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003be20:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003be30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003be40:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003be50:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003be60:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003be70:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003be80:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003be90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bea0:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003beb0:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003bec0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bed0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bee0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bef0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bf00:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bf10:·3832·2220·7461·6269·6e64·6578·3d22·3022··82"·tabindex="0" | |||
| 0003bf20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bf50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bf60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bf70:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003bf80:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003bf90:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| Max diff block lines reached; 4057603/4089949 bytes (99.21%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 116, 14 lines modified | Offset 116, 33 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 145 | ··package: |
| Offset 139, 26 lines modified | Offset 158, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 160 | ··-·low_complexity |
| 142 | ··-·low_disruption | 161 | ··-·low_disruption |
| 143 | ··-·medium_severity | 162 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 185, 14 lines modified | ||
| 178 | include·install_aide | 185 | include·install_aide |
| 179 | class·install_aide·{ | 186 | class·install_aide·{ |
| 180 | ··package·{·'aide': | 187 | ··package·{·'aide': |
| 181 | ····ensure·=>·'installed', | 188 | ····ensure·=>·'installed', |
| 182 | ··} | 189 | ··} |
| 183 | } | 190 | } |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 850, 95 lines modified | Offset 850, 95 lines modified | ||
| 850 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 850 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 851 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 851 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 852 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 852 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 853 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010800 | 853 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010800 |
| 854 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 854 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 855 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 855 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 856 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 856 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 857 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 858 | logvol·/home·1024 | ||
| 859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 857 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 860 | [[customizations.filesystem]] | 858 | [[customizations.filesystem]] |
| 861 | mountpoint·=·"/home" | 859 | mountpoint·=·"/home" |
| 862 | size·=·1073741824 | 860 | size·=·1073741824 |
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 861 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 862 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 863 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 864 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 865 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 868 | part·/home | 866 | part·/home |
| 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 868 | logvol·/home·1024 | ||
| 869 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 869 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 870 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. | 870 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. |
| 871 | Rationale:···The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. | 871 | Rationale:···The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging·system.·Putting·this·directory·on·a·separate·partition·makes·it·easier·to·apply·restrictions·e.g.·through·the·nosuid·mount·option. |
| Max diff block lines reached; 256130/262085 bytes (97.73%) of diff not shown. | |||
| Offset 14452, 15 lines modified | Offset 14452, 15 lines modified | ||
| 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000387a0:·7320·6f66·2032·3032·3 | 000387a0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15243, 237 lines modified | Offset 15243, 237 lines modified | ||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b910:·6d65·6469·6174·696f·6e20·4 | 0003b910:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b920:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b930:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b940:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b950:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b960:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003b920:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b930:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b940:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b950:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b960:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 0003b970:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b980:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b990:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b9a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b9b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b9c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b9d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b9e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b9f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ba10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ba20:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ba30:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ba40:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ba50:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ba60:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003ba70:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003ba80:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003ba90:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003baa0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bab0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003bac0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003bad0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003bae0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003baf0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003bb00:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003bb10:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bb20:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003bb30:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bb40:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003bb50:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003bb60:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bb70:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bb80:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bb90:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bba0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bbb0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bbc0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bbd0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bbe0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bbf0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bc00:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bc10:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003bc20:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bc30:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bc40:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bc50:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bc60:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 0003bc70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bc80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bc90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bca0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bcb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bcc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bcd0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003bce0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bcf0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bd00:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bd10:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003bd20:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bd30:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bd40:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bd50:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bd60:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bd70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bd80:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bd90:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bda0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bdb0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bdc0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bdd0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bde0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bdf0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b970:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b980:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b990:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003be10:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003be20:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003be30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003be40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003be50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003be60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003be70:·6574·3d22·2369·646d·3739·3832·2220·7461··et="#idm7982"·ta | |||
| 0003be80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003be90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bea0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003beb0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bec0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bed0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bee0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003bef0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bf00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bf10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 2561475/2593959 bytes (98.75%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 131, 14 lines modified | Offset 131, 33 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·--add=aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Ensure·aide·is·installed | 159 | -·name:·Ensure·aide·is·installed |
| 144 | ··package: | 160 | ··package: |
| Offset 154, 26 lines modified | Offset 173, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 175 | ··-·low_complexity |
| 157 | ··-·low_disruption | 176 | ··-·low_disruption |
| 158 | ··-·medium_severity | 177 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 185 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 200, 14 lines modified | ||
| 193 | include·install_aide | 200 | include·install_aide |
| 194 | class·install_aide·{ | 201 | class·install_aide·{ |
| 195 | ··package·{·'aide': | 202 | ··package·{·'aide': |
| 196 | ····ensure·=>·'installed', | 203 | ····ensure·=>·'installed', |
| 197 | ··} | 204 | ··} |
| 198 | } | 205 | } |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 204 | package·--add=aide | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 209 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 210 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 210 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 211 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 211 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 394, 105 lines modified | Offset 394, 105 lines modified | ||
| 394 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 394 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 395 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 395 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 396 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 396 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010800 | 397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010800 |
| 398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 399 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 399 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 402 | logvol·/home·1024 | ||
| 403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 404 | [[customizations.filesystem]] | 402 | [[customizations.filesystem]] |
| 405 | mountpoint·=·"/home" | 403 | mountpoint·=·"/home" |
| 406 | size·=·1073741824 | 404 | size·=·1073741824 |
| 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 408 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 409 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 410 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 408 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 411 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 409 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 412 | part·/home | 410 | part·/home |
| 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 412 | logvol·/home·1024 | ||
| 413 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 413 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/o\x8op\x8pt\x8t·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 414 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. | 414 | It·is·recommended·that·the·/opt·directory·resides·on·a·separate·partition. |
| 415 | ·············The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging | 415 | ·············The·/opt·partition·contains·additional·software,·usually·installed·outside·the·packaging |
| Max diff block lines reached; 172438/178263 bytes (96.73%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038790:·2032·3032·3 | 00038790:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14901, 217 lines modified | Offset 14901, 217 lines modified | ||
| 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | ||
| 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003a3b0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003a3c0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003a3d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a3e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a3f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a400:·6964·6d31·3333·3839·223e·3c70·7265·3e3c··idm13389"><pre>< | |||
| 0003a410:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003a420:·5d5d·0a6e·616d·6520·3d20·2264·6e66·2d61··]].name·=·"dnf-a | |||
| 0003a430:·7574·6f6d·6174·6963·220a·7665·7273·696f··utomatic".versio | |||
| 0003a440:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003a450:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a3b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003a3c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a3d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a3e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a3f0:·2220·6964·3d22·6964·6d31·3333·3839·223e··"·id="idm13389"> | |||
| 0003a400:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003a410:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003a420:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003a430:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003a440:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a450:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003a460:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a470:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003a480:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a490:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003a4a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003a4b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003a4c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003a4d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003a4e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a4f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003a500:·456e·7375·7265·2064·6e66·2d61·7574·6f6d··Ensure·dnf-autom | |||
| 0003a510:·6174·6963·2069·7320·696e·7374·616c·6c65··atic·is·installe | |||
| 0003a520:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003a530:·206e·616d·653a·2064·6e66·2d61·7574·6f6d···name:·dnf-autom | |||
| 0003a540:·6174·6963·0a20·2020·2073·7461·7465·3a20··atic.····state:· | |||
| 0003a550:·7072·6573·656e·740a·2020·7461·6773·3a0a··present.··tags:. | |||
| 0003a560:·2020·2d20·4343·452d·3832·3938·352d·330a····-·CCE-82985-3. | |||
| 0003a570:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a580:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a590:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a5a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a5b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a5c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a5d0:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a5e0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003a600:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003a | 0003a460:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003a470:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a620:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003a630:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003a640:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003a650:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | |||
| 0003a660:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003a670:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003a680:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003a690:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003a6a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003a6b0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003a6c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a6d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a | 0003a480:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003a6f0:·2269·646d·3133·3339·3022·3e3c·7461·626c··"idm13390"><tabl | |||
| 0003a700:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003a710:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003a720:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003a730:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003a740:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a750:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a760:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a | 0003a490:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a4a0:·3339·3022·2074·6162·696e·6465·783d·2230··390"·tabindex="0 | |||
| 0003a4b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a4c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a4d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a4e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a4f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a500:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003a510:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a520:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a530:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a540:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a550:·3333·3930·223e·3c74·6162·6c65·2063·6c61··3390"><table·cla | |||
| 0003a560:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a570:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a580:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a590:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a5a0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a | 0003a5b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003a5c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a790:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a7a0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a7b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003a7c0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003a7d0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003a7e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003a7f0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003a800:·616c·6c20·646e·662d·6175·746f·6d61·7469··all·dnf-automati | |||
| 0003a810:·630a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··c.</code></pre>< | |||
| 0003a820:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003a830:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003a840:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 371584/401308 bytes (92.59%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 94, 14 lines modified | Offset 94, 33 lines modified | ||
| 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 102 | [[packages]] | ||
| 103 | name·=·"dnf-automatic" | ||
| 104 | version·=·"*" | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | package·--add=dnf-automatic | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package·install·dnf-automatic | ||
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 106 | -·name:·Ensure·dnf-automatic·is·installed | 122 | -·name:·Ensure·dnf-automatic·is·installed |
| 107 | ··package: | 123 | ··package: |
| Offset 111, 26 lines modified | Offset 130, 14 lines modified | ||
| 111 | ··-·CCE-82985-3 | 130 | ··-·CCE-82985-3 |
| 112 | ··-·enable_strategy | 131 | ··-·enable_strategy |
| 113 | ··-·low_complexity | 132 | ··-·low_complexity |
| 114 | ··-·low_disruption | 133 | ··-·low_disruption |
| 115 | ··-·medium_severity | 134 | ··-·medium_severity |
| 116 | ··-·no_reboot_needed | 135 | ··-·no_reboot_needed |
| 117 | ··-·package_dnf-automatic_installed | 136 | ··-·package_dnf-automatic_installed |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·dnf-automatic | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"dnf-automatic" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 142 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 144, 21 lines modified | Offset 151, 14 lines modified | ||
| 144 | include·install_dnf-automatic | 151 | include·install_dnf-automatic |
| 145 | class·install_dnf-automatic·{ | 152 | class·install_dnf-automatic·{ |
| 146 | ··package·{·'dnf-automatic': | 153 | ··package·{·'dnf-automatic': |
| 147 | ····ensure·=>·'installed', | 154 | ····ensure·=>·'installed', |
| 148 | ··} | 155 | ··} |
| 149 | } | 156 | } |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=dnf-automatic | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 158 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 159 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 159 | automatic.conf. | 160 | automatic.conf. |
| 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 161 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 161 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 162 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 162 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 163 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9618, 14 lines modified | Offset 9618, 28 lines modified | ||
| 9618 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9618 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9619 | ····························A.9.1.2 | 9619 | ····························A.9.1.2 |
| 9620 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9620 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9621 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9621 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9622 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9622 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9623 | ·············_\x8c_\x8i_\x8s············2.2.3 | 9623 | ·············_\x8c_\x8i_\x8s············2.2.3 |
| 9624 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9624 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9630 | package·--remove=dhcp-server | ||
| 9631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9634 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9635 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9636 | package·remove·dhcp-server | ||
| 9625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9638 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9639 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9640 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9641 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9630 | -·name:·Ensure·dhcp-server·is·removed | 9642 | -·name:·Ensure·dhcp-server·is·removed |
| 9631 | ··package: | 9643 | ··package: |
| Max diff block lines reached; 36077/41664 bytes (86.59%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038680:·3230·323 | 00038680:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15293, 237 lines modified | Offset 15293, 237 lines modified | ||
| 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bc30:·6564·6961·7469·6f6e·204 | 0003bc30:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003bc40:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003bc50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bc60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bc80:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc40:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bc50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bc60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bc70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bc80:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003bc90:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bca0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bcb0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bcc0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bcd0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bce0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bcf0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bd00:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bd10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bd20:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bd30:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bd40:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bd50:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bd60:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bd70:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bd80:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bd90:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bda0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bdb0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bdc0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bdd0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003bde0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003bdf0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003be00:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003be10:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003be20:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003be30:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003be40:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003be50:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003be60:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003be70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003be80:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003be90:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bea0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003beb0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bec0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bed0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bee0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bef0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bf00:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bf10:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bf20:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bf30:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf40:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf50:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bf60:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bf70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bf80:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bf90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bfa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bfb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bfc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bfd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bfe0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bff0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003c000:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c010:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c020:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003c030:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003c040:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c050:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c060:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c070:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c080:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c090:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c0a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c0b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c0c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003c0d0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c0e0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c0f0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c100:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c110:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003 | 0003bc90:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003bca0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003bcb0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003c130:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003c140:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c150:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003c160:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003c170:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003c180:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c190:·743d·2223·6964·6d37·3938·3222·2074·6162··t="#idm7982"·tab | |||
| 0003c1a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003c1b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003c1c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c1d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c1e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c1f0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003c200:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c210:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c220:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c230:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| Max diff block lines reached; 5599550/5632034 bytes (99.42%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 145, 26 lines modified | Offset 164, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 166 | ··-·low_complexity |
| 148 | ··-·low_disruption | 167 | ··-·low_disruption |
| 149 | ··-·medium_severity | 168 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 176 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 184, 21 lines modified | Offset 191, 14 lines modified | ||
| 184 | include·install_aide | 191 | include·install_aide |
| 185 | class·install_aide·{ | 192 | class·install_aide·{ |
| 186 | ··package·{·'aide': | 193 | ··package·{·'aide': |
| 187 | ····ensure·=>·'installed', | 194 | ····ensure·=>·'installed', |
| 188 | ··} | 195 | ··} |
| 189 | } | 196 | } |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 201 | To·initiate·a·manual·check,·run·the·following·command: | 202 | To·initiate·a·manual·check,·run·the·following·command: |
| 202 | $·sudo·/usr/sbin/aide·--check | 203 | $·sudo·/usr/sbin/aide·--check |
| Offset 737, 14 lines modified | Offset 737, 33 lines modified | ||
| 737 | ··-·PCI-DSSv4-2.2.7 | 737 | ··-·PCI-DSSv4-2.2.7 |
| 738 | ··-·configure_crypto_policy | 738 | ··-·configure_crypto_policy |
| 739 | ··-·high_severity | 739 | ··-·high_severity |
| 740 | ··-·low_complexity | 740 | ··-·low_complexity |
| 741 | ··-·low_disruption | 741 | ··-·low_disruption |
| 742 | ··-·no_reboot_needed | 742 | ··-·no_reboot_needed |
| 743 | ··-·restrict_strategy | 743 | ··-·restrict_strategy |
| 744 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 745 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 746 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 747 | rc=$? | ||
| 748 | if·test·"$rc"·=·127;·then | ||
| 749 | » echo·"$stderr_of_call"·>&2 | ||
| 750 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 751 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 752 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 753 | » false··#·end·with·an·error·code | ||
| 754 | elif·test·"$rc"·!=·0;·then | ||
| 755 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 756 | » false··#·end·with·an·error·code | ||
| 757 | fi | ||
| 744 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 758 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 745 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 759 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 420578/426066 bytes (98.71%) of diff not shown. | |||
| Offset 14434, 16 lines modified | Offset 14434, 16 lines modified | ||
| 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038680:·2020·2028·6173·206f·6620·3230·323 | 00038680:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00038690:·3 | 00038690:·312d·3039·290a·2020·2020·2020·2020·2020··1-09).·········· | ||
| 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15262, 236 lines modified | Offset 15262, 236 lines modified | ||
| 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | ||
| 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ba40:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003ba50:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ba60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ba70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ba80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ba90:·3d22·6964·6d37·3938·3022·3e3c·7072·653e··="idm7980"><pre> | |||
| 0003ba40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ba50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ba60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ba70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba80:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003ba90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003baa0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bab0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bac0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bad0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bae0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003baf0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bb00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bb10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bb20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bb30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bb40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bb50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bb60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bb70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bb80:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003bb90:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bba0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003bbb0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bbc0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bbd0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003bbe0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003bbf0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003bc00:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003bc10:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003bc20:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003bc30:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003bc40:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003bc50:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bc60:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bc70:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bc80:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bc90:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bca0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bcb0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bcc0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bcd0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bce0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bcf0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bd00:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bd10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003bd20:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003bd30:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003bd40:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bd50:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bd60:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bd70:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bd80:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bd90:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003bda0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bdb0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bdc0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bdd0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bde0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bdf0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003be00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003be10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003be20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003be30:·2069·643d·2269·646d·3739·3831·223e·3c74···id="idm7981"><t | |||
| 0003be40:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003be50:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003be60:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003be70:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003be80:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003be90:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bea0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003beb0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003bec0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bed0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bee0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bef0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bf00:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bf10:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bf20:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b | 0003baa0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | ||
| 0003bab0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003bac0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003bf40:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003bf50:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bf60:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bf70:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bf80:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bf90:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bfa0:·646d·3739·3832·2220·7461·6269·6e64·6578··dm7982"·tabindex | |||
| 0003bfb0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bfc0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bfd0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bfe0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bff0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c000:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003c010:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003c020:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| Max diff block lines reached; 3418927/3451411 bytes (99.06%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 14 lines modified | Offset 117, 33 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=aide | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure·aide·is·installed | 145 | -·name:·Ensure·aide·is·installed |
| 130 | ··package: | 146 | ··package: |
| Offset 140, 26 lines modified | Offset 159, 14 lines modified | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 141 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 161 | ··-·low_complexity |
| 143 | ··-·low_disruption | 162 | ··-·low_disruption |
| 144 | ··-·medium_severity | 163 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 146 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 171 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 186, 14 lines modified | ||
| 179 | include·install_aide | 186 | include·install_aide |
| 180 | class·install_aide·{ | 187 | class·install_aide·{ |
| 181 | ··package·{·'aide': | 188 | ··package·{·'aide': |
| 182 | ····ensure·=>·'installed', | 189 | ····ensure·=>·'installed', |
| 183 | ··} | 190 | ··} |
| 184 | } | 191 | } |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·--add=aide | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 732, 14 lines modified | Offset 732, 33 lines modified | ||
| 732 | ··-·PCI-DSSv4-2.2.7 | 732 | ··-·PCI-DSSv4-2.2.7 |
| 733 | ··-·configure_crypto_policy | 733 | ··-·configure_crypto_policy |
| 734 | ··-·high_severity | 734 | ··-·high_severity |
| 735 | ··-·low_complexity | 735 | ··-·low_complexity |
| 736 | ··-·low_disruption | 736 | ··-·low_disruption |
| 737 | ··-·no_reboot_needed | 737 | ··-·no_reboot_needed |
| 738 | ··-·restrict_strategy | 738 | ··-·restrict_strategy |
| 739 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 740 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 741 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 742 | rc=$? | ||
| 743 | if·test·"$rc"·=·127;·then | ||
| 744 | » echo·"$stderr_of_call"·>&2 | ||
| 745 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 746 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 747 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 748 | » false··#·end·with·an·error·code | ||
| 749 | elif·test·"$rc"·!=·0;·then | ||
| 750 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 751 | » false··#·end·with·an·error·code | ||
| 752 | fi | ||
| 739 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 753 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 740 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 754 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 283588/289076 bytes (98.10%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15253, 237 lines modified | Offset 15253, 237 lines modified | ||
| 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b9b0:·6d65·6469·6174·696f·6e20·4 | 0003b9b0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b9c0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b9d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b9e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba00:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003b9c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 0003ba10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ba60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ba80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ba90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003baa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bab0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bac0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bad0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bae0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003baf0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003bb00:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bb10:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bb20:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bb30:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bb40:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bb50:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003bb60:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003bb70:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003bb80:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003bb90:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003bba0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003bbb0:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bbc0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003bbd0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bbe0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003bbf0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003bc00:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bc10:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bc20:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bc30:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bc40:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bc50:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bc60:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bc70:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bc80:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bc90:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bca0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bcb0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003bcc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bcd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bce0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bcf0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bd00:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 0003bd10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bd20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bd30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bd40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bd50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bd60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bd70:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003bd80:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bd90:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bda0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bdb0:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003bdc0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bdd0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bde0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bdf0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003be00:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003be10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003be20:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003be30:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003be40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003be50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003be60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003be70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003be80:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003be90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003ba10:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003ba20:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003ba30:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003beb0:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003bec0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003bed0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bee0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bef0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bf00:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bf10:·6574·3d22·2369·646d·3739·3832·2220·7461··et="#idm7982"·ta | |||
| 0003bf20:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bf30:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bf40:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bf50:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bf60:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bf70:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bf80:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003bf90:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bfa0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bfb0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 3172309/3204793 bytes (98.99%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 116, 14 lines modified | Offset 116, 33 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 145 | ··package: |
| Offset 139, 26 lines modified | Offset 158, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 160 | ··-·low_complexity |
| 142 | ··-·low_disruption | 161 | ··-·low_disruption |
| 143 | ··-·medium_severity | 162 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 185, 14 lines modified | ||
| 178 | include·install_aide | 185 | include·install_aide |
| 179 | class·install_aide·{ | 186 | class·install_aide·{ |
| 180 | ··package·{·'aide': | 187 | ··package·{·'aide': |
| 181 | ····ensure·=>·'installed', | 188 | ····ensure·=>·'installed', |
| 182 | ··} | 189 | ··} |
| 183 | } | 190 | } |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 731, 14 lines modified | Offset 731, 33 lines modified | ||
| 731 | ··-·PCI-DSSv4-2.2.7 | 731 | ··-·PCI-DSSv4-2.2.7 |
| 732 | ··-·configure_crypto_policy | 732 | ··-·configure_crypto_policy |
| 733 | ··-·high_severity | 733 | ··-·high_severity |
| 734 | ··-·low_complexity | 734 | ··-·low_complexity |
| 735 | ··-·low_disruption | 735 | ··-·low_disruption |
| 736 | ··-·no_reboot_needed | 736 | ··-·no_reboot_needed |
| 737 | ··-·restrict_strategy | 737 | ··-·restrict_strategy |
| 738 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 739 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 740 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 741 | rc=$? | ||
| 742 | if·test·"$rc"·=·127;·then | ||
| 743 | » echo·"$stderr_of_call"·>&2 | ||
| 744 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 745 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 746 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 747 | » false··#·end·with·an·error·code | ||
| 748 | elif·test·"$rc"·!=·0;·then | ||
| 749 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 750 | » false··#·end·with·an·error·code | ||
| 751 | fi | ||
| 738 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 752 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 739 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 753 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 263691/269179 bytes (97.96%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15285, 236 lines modified | Offset 15285, 236 lines modified | ||
| 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bbb0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003bbc0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bbd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bbe0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bbf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bc00:·2269·646d·3739·3830·223e·3c70·7265·3e3c··"idm7980"><pre>< | |||
| 0003bbb0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bbc0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bbd0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bbe0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bbf0:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc00:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bc10:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bc20:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bc30:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bc40:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bc50:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bc60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bc70:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bc80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bc90:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bca0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bcb0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bcc0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bcd0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bce0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bcf0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003bd00:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003bd10:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003bd20:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003bd30:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003bd40:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003bd50:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003bd60:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003bd70:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003bd80:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003bd90:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003bda0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003bdb0:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bdc0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bdd0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bde0:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bdf0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003be00:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003be10:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003be20:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003be30:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003be40:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003be50:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003be60:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003be70:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003be80:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003be90:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bea0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003beb0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bec0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bed0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bee0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bef0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bf00:·6d37·3938·3122·2074·6162·696e·6465·783d··m7981"·tabindex= | |||
| 0003bf10:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bf20:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bf30:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bf40:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bf50:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bf60:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003bf70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bf80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bf90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bfa0:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 0003bfb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bfc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bfd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bfe0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bff0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c000:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c020:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c030:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c040:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c050:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c070:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c080:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c090:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003 | 0003bc10:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | ||
| 0003bc20:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003bc30:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c0b0:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 0003c0c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c0d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c0e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c0f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c100:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c110:·6d37·3938·3222·2074·6162·696e·6465·783d··m7982"·tabindex= | |||
| 0003c120:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c130:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c140:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c150:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c160:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c170:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003c180:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003c190:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c1a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| Max diff block lines reached; 5459360/5491706 bytes (99.41%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 124 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ·············_\x8c_\x8i_\x8s············5.3.1 | 125 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·--add=aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·install·aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 150 | ··package: |
| Offset 144, 26 lines modified | Offset 163, 14 lines modified | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 145 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 165 | ··-·low_complexity |
| 147 | ··-·low_disruption | 166 | ··-·low_disruption |
| 148 | ··-·medium_severity | 167 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·install·aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | 175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 190, 14 lines modified | ||
| 183 | include·install_aide | 190 | include·install_aide |
| 184 | class·install_aide·{ | 191 | class·install_aide·{ |
| 185 | ··package·{·'aide': | 192 | ··package·{·'aide': |
| 186 | ····ensure·=>·'installed', | 193 | ····ensure·=>·'installed', |
| 187 | ··} | 194 | ··} |
| 188 | } | 195 | } |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 198 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 201 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 202 | $·sudo·/usr/sbin/aide·--check |
| Offset 736, 14 lines modified | Offset 736, 33 lines modified | ||
| 736 | ··-·PCI-DSSv4-2.2.7 | 736 | ··-·PCI-DSSv4-2.2.7 |
| 737 | ··-·configure_crypto_policy | 737 | ··-·configure_crypto_policy |
| 738 | ··-·high_severity | 738 | ··-·high_severity |
| 739 | ··-·low_complexity | 739 | ··-·low_complexity |
| 740 | ··-·low_disruption | 740 | ··-·low_disruption |
| 741 | ··-·no_reboot_needed | 741 | ··-·no_reboot_needed |
| 742 | ··-·restrict_strategy | 742 | ··-·restrict_strategy |
| 743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 744 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 745 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 746 | rc=$? | ||
| 747 | if·test·"$rc"·=·127;·then | ||
| 748 | » echo·"$stderr_of_call"·>&2 | ||
| 749 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 750 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 751 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 752 | » false··#·end·with·an·error·code | ||
| 753 | elif·test·"$rc"·!=·0;·then | ||
| 754 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 755 | » false··#·end·with·an·error·code | ||
| 756 | fi | ||
| 743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 757 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 744 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 758 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 406390/411878 bytes (98.67%) of diff not shown. | |||
| Offset 14469, 15 lines modified | Offset 14469, 15 lines modified | ||
| 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000388b0:·6620·3230·323 | 000388b0:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bba0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003bbb0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003bbc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bbd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bbe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bbf0:·643d·2269·646d·3739·3830·223e·3c70·7265··d="idm7980"><pre | |||
| 0003bba0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bbb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bbc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bbd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bbe0:·7073·6522·2069·643d·2269·646d·3739·3830··pse"·id="idm7980 | |||
| 0003bbf0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc00:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc10:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc20:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bc30:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bc40:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bc50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bc60:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bc70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bc80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bc90:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bca0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bcb0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bcc0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bcd0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bce0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003bcf0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003bd00:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bd10:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bd20:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bd30:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bd40:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003bd50:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003bd60:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003bd70:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003bd80:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003bd90:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003bda0:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003bdb0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bdc0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bdd0:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003bde0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bdf0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003be00:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003be10:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003be20:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003be30:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003be40:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003be50:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003be60:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003be70:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003be80:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003be90:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003bea0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003beb0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bec0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bed0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bee0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bef0:·6964·6d37·3938·3122·2074·6162·696e·6465··idm7981"·tabinde | |||
| 0003bf00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bf10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bf20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bf30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bf40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bf50:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003bf60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bf70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bf80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bf90:·2220·6964·3d22·6964·6d37·3938·3122·3e3c··"·id="idm7981">< | |||
| 0003bfa0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bfb0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bfc0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bfd0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bfe0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bff0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c000:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c010:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c020:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c030:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c040:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c050:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c060:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c070:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c080:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c0 | 0003bc00:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003bc10:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003bc20:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003c0a0:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003c0b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c0c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c0d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c0e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c0f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c100:·6964·6d37·3938·3222·2074·6162·696e·6465··idm7982"·tabinde | |||
| 0003c110:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c120:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c130:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c140:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c150:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c160:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003c170:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003c180:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c190:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| Max diff block lines reached; 4706975/4739321 bytes (99.32%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:8 | 65 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 145, 26 lines modified | Offset 164, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 166 | ··-·low_complexity |
| 148 | ··-·low_disruption | 167 | ··-·low_disruption |
| 149 | ··-·medium_severity | 168 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 176 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 184, 21 lines modified | Offset 191, 14 lines modified | ||
| 184 | include·install_aide | 191 | include·install_aide |
| 185 | class·install_aide·{ | 192 | class·install_aide·{ |
| 186 | ··package·{·'aide': | 193 | ··package·{·'aide': |
| 187 | ····ensure·=>·'installed', | 194 | ····ensure·=>·'installed', |
| 188 | ··} | 195 | ··} |
| 189 | } | 196 | } |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 197 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 198 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 199 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 200 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 322, 14 lines modified | Offset 322, 18 lines modified | ||
| 322 | ·············_\x8i_\x8s_\x8m······1446 | 322 | ·············_\x8i_\x8s_\x8m······1446 |
| 323 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 323 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 324 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 324 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 325 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 325 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 326 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 326 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 328 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 328 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [customizations] | ||
| 331 | fips·=·true | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 334 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 337 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 335 | ··set_fact: | 338 | ··set_fact: |
| Offset 433, 18 lines modified | Offset 437, 14 lines modified | ||
| 433 | ··-·NIST-800-53-SC-13 | 437 | ··-·NIST-800-53-SC-13 |
| 434 | ··-·enable_fips_mode | 438 | ··-·enable_fips_mode |
| 435 | ··-·high_severity | 439 | ··-·high_severity |
| 436 | ··-·medium_complexity | 440 | ··-·medium_complexity |
| 437 | ··-·medium_disruption | 441 | ··-·medium_disruption |
| 438 | ··-·reboot_required | 442 | ··-·reboot_required |
| 439 | ··-·restrict_strategy | 443 | ··-·restrict_strategy |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 474878/481186 bytes (98.69%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000386a0:·3 | 000386a0:·342d·3131·2d30·3929·0a20·2020·2020·2020··4-11-09).······· | ||
| 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 17563, 131 lines modified | Offset 17563, 131 lines modified | ||
| 000449a0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000449a0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000449b0:·6d38·3736·3522·2074·6162·696e·6465·783d··m8765"·tabindex= | 000449b0:·6d38·3736·3522·2074·6162·696e·6465·783d··m8765"·tabindex= | ||
| 000449c0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 000449c0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 000449d0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 000449d0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 000449e0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 000449e0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 000449f0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 000449f0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00044a00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00044a00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00044a10:·6564·6961·7469·6f6e·204b·7562·6572·6e65··ediation·Kuberne | |||
| 00044a20:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 00044a30:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00044a40:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00044a50:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00044a60:·6964·6d38·3736·3522·3e3c·7461·626c·6520··idm8765"><table· | |||
| 00044a70:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00044a80:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00044a90:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00044aa0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00044ab0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00044ac0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00044ad0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00044ae0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00044af0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00044b00:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00044b10:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | |||
| 00044b20:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00044b30:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 00044b40:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 00044b50:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00044b60:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 00044b70:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 00044b80:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 00044b90:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 00044ba0:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 00044bb0:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 00044bc0:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 00044bd0:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 00044be0:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 00044bf0:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 00044c00:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 00044c10:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 00044c20:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 00044c30:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 00044c40:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 00044c50:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 00044c60:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 00044c70:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 00044c80:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 00044c90:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 00044ca0:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 00044cb0:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 00044cc0:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 00044cd0:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 00044ce0:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 00044cf0:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 00044d00:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 00044d10:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 00044d20:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 00044d30:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 00044d40:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 00044d50:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 00044d60:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 00044d70:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00044d80:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00044d90:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00044da0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00044db0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00044dc0:·3736·3622·2074·6162·696e·6465·783d·2230··766"·tabindex="0 | |||
| 00044dd0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00044de0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00044df0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00044e00:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00044e10:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00044 | 00044a10:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 00044 | 00044a20:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 00044 | 00044a30:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 00044 | 00044a40:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 00044 | 00044a50:·6170·7365·2220·6964·3d22·6964·6d38·3736··apse"·id="idm876 | ||
| 00044 | 00044a60:·3522·3e3c·7072·653e·3c63·6f64·653e·0a76··5"><pre><code>.v | ||
| 00044 | 00044a70:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | ||
| 00044 | 00044a80:·5f70·6f6c·6963·793d·273c·6162·6272·2074··_policy='<abbr·t | ||
| 00044 | 00044a90:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 00044 | 00044aa0:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 00044 | 00044ab0:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 00044 | 00044ac0:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 00044 | 00044ad0:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | ||
| 00044 | 00044ae0:·7279·7074·6f5f·706f·6c69·6379·223e·4445··rypto_policy">DE | ||
| 00044f0 | 00044af0:·4641·554c·543a·4e4f·2d53·4841·313c·2f61··FAULT:NO-SHA1</a | ||
| 00044 | 00044b00:·6262·723e·270a·0a0a·7374·6465·7272·5f6f··bbr>'...stderr_o | ||
| 00044 | 00044b10:·665f·6361·6c6c·3d24·2875·7064·6174·652d··f_call=$(update- | ||
| 00044 | 00044b20:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | ||
| 00044 | 00044b30:·2d2d·7365·7420·247b·7661·725f·7379·7374··--set·${var_syst | ||
| 00044 | 00044b40:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 00044 | 00044b50:·7d20·3226·6774·3b26·616d·703b·3120·2667··}·2>&1·&g | ||
| 00044 | 00044b60:·743b·202f·6465·762f·6e75·6c6c·290a·7263··t;·/dev/null).rc | ||
| 00044 | 00044b70:·3d24·3f0a·0a69·6620·7465·7374·2022·2472··=$?..if·test·"$r | ||
| 00044 | 00044b80:·6322·203d·2031·3237·3b20·7468·656e·0a09··c"·=·127;·then.. | ||
| 00044 | 00044b90:·6563·686f·2022·2473·7464·6572·725f·6f66··echo·"$stderr_of | ||
| 00044 | 00044ba0:·5f63·616c·6c22·2026·6774·3b26·616d·703b··_call"·>& | ||
| 00044 | 00044bb0:·320a·0965·6368·6f20·224d·616b·6520·7375··2..echo·"Make·su | ||
| 00044 | 00044bc0:·7265·2074·6861·7420·7468·6520·7363·7269··re·that·the·scri | ||
| 00044 | 00044bd0:·7074·2069·7320·696e·7374·616c·6c65·6420··pt·is·installed· | ||
| 00044 | 00044be0:·6f6e·2074·6865·2072·656d·6564·6961·7465··on·the·remediate | ||
| 0004 | 00044bf0:·6420·7379·7374·656d·2e22·2026·6774·3b26··d·system."·>& | ||
| 0004 | 00044c00:·616d·703b·320a·0965·6368·6f20·2253·6565··amp;2..echo·"See | ||
| 0004 | 00044c10:·206f·7574·7075·7420·6f66·2074·6865·2027···output·of·the·' | ||
| 0004 | 00044c20:·646e·6620·7072·6f76·6964·6573·2075·7064··dnf·provides·upd | ||
| 00044c30:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 00044c40:·6965·7327·2063·6f6d·6d61·6e64·2220·2667··ies'·command"·&g | |||
| 00044c50:·743b·2661·6d70·3b32·0a09·6563·686f·2022··t;&2..echo·" | |||
| 00044c60:·746f·2073·6565·2077·6861·7420·7061·636b··to·see·what·pack | |||
| 00044c70:·6167·6520·746f·2028·7265·2969·6e73·7461··age·to·(re)insta | |||
| Max diff block lines reached; 2021743/2039599 bytes (99.12%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 636, 14 lines modified | Offset 636, 33 lines modified | ||
| 636 | ··-·PCI-DSSv4-2.2.7 | 636 | ··-·PCI-DSSv4-2.2.7 |
| 637 | ··-·configure_crypto_policy | 637 | ··-·configure_crypto_policy |
| 638 | ··-·high_severity | 638 | ··-·high_severity |
| 639 | ··-·low_complexity | 639 | ··-·low_complexity |
| 640 | ··-·low_disruption | 640 | ··-·low_disruption |
| 641 | ··-·no_reboot_needed | 641 | ··-·no_reboot_needed |
| 642 | ··-·restrict_strategy | 642 | ··-·restrict_strategy |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 644 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 645 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 646 | rc=$? | ||
| 647 | if·test·"$rc"·=·127;·then | ||
| 648 | » echo·"$stderr_of_call"·>&2 | ||
| 649 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 650 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 651 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 652 | » false··#·end·with·an·error·code | ||
| 653 | elif·test·"$rc"·!=·0;·then | ||
| 654 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 655 | » false··#·end·with·an·error·code | ||
| 656 | fi | ||
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 648 | --- | 662 | --- |
| 649 | apiVersion:·machineconfiguration.openshift.io/v1 | 663 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 661, 33 lines modified | Offset 680, 14 lines modified | ||
| 661 | ············Before=kubelet.service | 680 | ············Before=kubelet.service |
| 662 | ············[Service] | 681 | ············[Service] |
| 663 | ············Type=oneshot | 682 | ············Type=oneshot |
| 664 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 683 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 665 | ············RemainAfterExit=yes | 684 | ············RemainAfterExit=yes |
| 666 | ············[Install] | 685 | ············[Install] |
| 667 | ············WantedBy=multi-user.target | 686 | ············WantedBy=multi-user.target |
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 669 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 670 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 671 | rc=$? | ||
| 672 | if·test·"$rc"·=·127;·then | ||
| 673 | » echo·"$stderr_of_call"·>&2 | ||
| 674 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 675 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 676 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 677 | » false··#·end·with·an·error·code | ||
| 678 | elif·test·"$rc"·!=·0;·then | ||
| 679 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 680 | » false··#·end·with·an·error·code | ||
| 681 | fi | ||
| 682 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 687 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 683 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 688 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 684 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 689 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 685 | Severity: ···medium | 690 | Severity: ···medium |
| 686 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 691 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 687 | Identifiers:·CCE-80939-2 | 692 | Identifiers:·CCE-80939-2 |
| 688 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 693 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1038, 14 lines modified | Offset 1038, 33 lines modified | ||
| 1038 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1038 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1039 | The·rear·package·can·be·installed·with·the·following·command: | 1039 | The·rear·package·can·be·installed·with·the·following·command: |
| 1040 | $·sudo·yum·install·rear | 1040 | $·sudo·yum·install·rear |
| 1041 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1041 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1042 | Severity: ···medium | 1042 | Severity: ···medium |
| 1043 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 1043 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1044 | Identifiers:·CCE-82883-0 | 1044 | Identifiers:·CCE-82883-0 |
| 1045 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1046 | [[packages]] | ||
| 1047 | name·=·"rear" | ||
| 1048 | version·=·"*" | ||
| 1049 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1050 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1051 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1052 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1053 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1054 | package·--add=rear | ||
| 1055 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1056 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1057 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1058 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1059 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1060 | package·install·rear | ||
| 1045 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1061 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1046 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1062 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1047 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1063 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1048 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1064 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1049 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1065 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1050 | -·name:·Ensure·rear·is·installed | 1066 | -·name:·Ensure·rear·is·installed |
| 1051 | ··package: | 1067 | ··package: |
| Offset 1060, 26 lines modified | Offset 1079, 14 lines modified | ||
| 1060 | ··-·CCE-82883-0 | 1079 | ··-·CCE-82883-0 |
| 1061 | ··-·enable_strategy | 1080 | ··-·enable_strategy |
| 1062 | ··-·low_complexity | 1081 | ··-·low_complexity |
| 1063 | ··-·low_disruption | 1082 | ··-·low_disruption |
| 1064 | ··-·medium_severity | 1083 | ··-·medium_severity |
| 1065 | ··-·no_reboot_needed | 1084 | ··-·no_reboot_needed |
| 1066 | ··-·package_rear_installed | 1085 | ··-·package_rear_installed |
| 1067 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1068 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 164127/170253 bytes (96.40%) of diff not shown. | |||
| Offset 14455, 16 lines modified | Offset 14455, 16 lines modified | ||
| 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000387d0:·2020·2861·7320·6f66·2032·3032·3 | 000387d0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 000387e0:·2d3 | 000387e0:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 16943, 130 lines modified | Offset 16943, 130 lines modified | ||
| 000422e0:·6172·6765·743d·2223·6964·6d38·3736·3522··arget="#idm8765" | 000422e0:·6172·6765·743d·2223·6964·6d38·3736·3522··arget="#idm8765" | ||
| 000422f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 000422f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00042300:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 00042300:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00042310:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 00042310:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00042320:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 00042320:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00042330:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 00042330:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 00042340:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 00042340:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 00042350:·6f6e·204b·7562·6572·6e65·7465·7320·736e··on·Kubernetes·sn | |||
| 00042360:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00042370:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00042380:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00042390:·6170·7365·2220·6964·3d22·6964·6d38·3736··apse"·id="idm876 | |||
| 000423a0:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 000423b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000423c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000423d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 000423e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 000423f0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00042400:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00042410:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00042420:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00042430:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00042440:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e74··eboot:</th><td>t | |||
| 00042450:·7275·653c·2f74·643e·3c2f·7472·3e3c·7472··rue</td></tr><tr | |||
| 00042460:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00042470:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 00042480:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00042490:·3e3c·7072·653e·3c63·6f64·653e·2d2d·2d0a··><pre><code>---. | |||
| 000424a0:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 000424b0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 000424c0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 000424d0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 000424e0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 000424f0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| 00042500:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | |||
| 00042510:·3a20·332e·312e·300a·2020·2020·7379·7374··:·3.1.0.····syst | |||
| 00042520:·656d·643a·0a20·2020·2020·2075·6e69·7473··emd:.······units | |||
| 00042530:·3a0a·2020·2020·2020·2020·2d20·6e61·6d65··:.········-·name | |||
| 00042540:·3a20·636f·6e66·6967·7572·652d·6372·7970··:·configure-cryp | |||
| 00042550:·746f·2d70·6f6c·6963·792e·7365·7276·6963··to-policy.servic | |||
| 00042560:·650a·2020·2020·2020·2020·2020·656e·6162··e.··········enab | |||
| 00042570:·6c65·643a·2074·7275·650a·2020·2020·2020··led:·true.······ | |||
| 00042580:·2020·2020·636f·6e74·656e·7473·3a20·7c0a······contents:·|. | |||
| 00042590:·2020·2020·2020·2020·2020·2020·5b55·6e69··············[Uni | |||
| 000425a0:·745d·0a20·2020·2020·2020·2020·2020·2042··t].············B | |||
| 000425b0:·6566·6f72·653d·6b75·6265·6c65·742e·7365··efore=kubelet.se | |||
| 000425c0:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 000425d0:·2020·5b53·6572·7669·6365·5d0a·2020·2020····[Service].···· | |||
| 000425e0:·2020·2020·2020·2020·5479·7065·3d6f·6e65··········Type=one | |||
| 000425f0:·7368·6f74·0a20·2020·2020·2020·2020·2020··shot.··········· | |||
| 00042600:·2045·7865·6353·7461·7274·3d75·7064·6174···ExecStart=updat | |||
| 00042610:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 00042620:·7320·2d2d·7365·7420·7b7b·2e76·6172·5f73··s·--set·{{.var_s | |||
| 00042630:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 00042640:·6963·797d·7d0a·2020·2020·2020·2020·2020··icy}}.·········· | |||
| 00042650:·2020·5265·6d61·696e·4166·7465·7245·7869····RemainAfterExi | |||
| 00042660:·743d·7965·730a·2020·2020·2020·2020·2020··t=yes.·········· | |||
| 00042670:·2020·5b49·6e73·7461·6c6c·5d0a·2020·2020····[Install].···· | |||
| 00042680:·2020·2020·2020·2020·5761·6e74·6564·4279··········WantedBy | |||
| 00042690:·3d6d·756c·7469·2d75·7365·722e·7461·7267··=multi-user.targ | |||
| 000426a0:·6574·0a3c·2f63·6f64·653e·3c2f·7072·653e··et.</code></pre> | |||
| 000426b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 000426c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 000426d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 000426e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 000426f0:·6765·743d·2223·6964·6d38·3736·3622·2074··get="#idm8766"·t | |||
| 00042700:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00042710:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00042720:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00042730:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00042740:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00042750:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00042 | 00042350:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 00042 | 00042360:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00042 | 00042370:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00042 | 00042380:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00042 | 00042390:·6964·3d22·6964·6d38·3736·3522·3e3c·7072··id="idm8765"><pr | ||
| 00042 | 000423a0:·653e·3c63·6f64·653e·0a76·6172·5f73·7973··e><code>.var_sys | ||
| 000423b0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 000423c0:·793d·273c·6162·6272·2074·6974·6c65·3d22··y='<abbr·title=" | |||
| 000423d0:·6672·6f6d·2050·726f·6669·6c65·2f72·6566··from·Profile/ref | |||
| 000423e0:·696e·652d·7661·6c75·653a·2078·6363·6466··ine-value:·xccdf | |||
| 000423f0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | |||
| 00042400:·636f·6e74·656e·745f·7661·6c75·655f·7661··content_value_va | |||
| 00042410:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00042420:·706f·6c69·6379·223e·4649·5053·3c2f·6162··policy">FIPS</ab | |||
| 00042430:·6272·3e27·0a0a·0a73·7464·6572·725f·6f66··br>'...stderr_of | |||
| 00042440:·5f63·616c·6c3d·2428·7570·6461·7465·2d63··_call=$(update-c | |||
| 00042450:·7279·7074·6f2d·706f·6c69·6369·6573·202d··rypto-policies·- | |||
| 00042460:·2d73·6574·2024·7b76·6172·5f73·7973·7465··-set·${var_syste | |||
| 00042 | 00042470:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | ||
| 000427d0:·273c·6162·6272·2074·6974·6c65·3d22·6672··'<abbr·title="fr | |||
| 000427e0:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 000427f0:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 00042800:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 00042810:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 00042820:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00042830:·6c69·6379·223e·4649·5053·3c2f·6162·6272··licy">FIPS</abbr | |||
| 00042840:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 00042850:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 00042860:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 00042870:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 00042880:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 000428 | 00042480:·2032·2667·743b·2661·6d70·3b31·2026·6774···2>&1·> | ||
| 00042 | 00042490:·3b20·2f64·6576·2f6e·756c·6c29·0a72·633d··;·/dev/null).rc= | ||
| 00042 | 000424a0:·243f·0a0a·6966·2074·6573·7420·2224·7263··$?..if·test·"$rc | ||
| 00042 | 000424b0:·2220·3d20·3132·373b·2074·6865·6e0a·0965··"·=·127;·then..e | ||
| 00042 | 000424c0:·6368·6f20·2224·7374·6465·7272·5f6f·665f··cho·"$stderr_of_ | ||
| 00042 | 000424d0:·6361·6c6c·2220·2667·743b·2661·6d70·3b32··call"·>&2 | ||
| 00042 | 000424e0:·0a09·6563·686f·2022·4d61·6b65·2073·7572··..echo·"Make·sur | ||
| Max diff block lines reached; 2260749/2278605 bytes (99.22%) of diff not shown. | |||
| Offset 57, 15 lines modified | Offset 57, 15 lines modified | ||
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 504, 14 lines modified | Offset 504, 33 lines modified | ||
| 504 | ··-·PCI-DSSv4-2.2.7 | 504 | ··-·PCI-DSSv4-2.2.7 |
| 505 | ··-·configure_crypto_policy | 505 | ··-·configure_crypto_policy |
| 506 | ··-·high_severity | 506 | ··-·high_severity |
| 507 | ··-·low_complexity | 507 | ··-·low_complexity |
| 508 | ··-·low_disruption | 508 | ··-·low_disruption |
| 509 | ··-·no_reboot_needed | 509 | ··-·no_reboot_needed |
| 510 | ··-·restrict_strategy | 510 | ··-·restrict_strategy |
| 511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 512 | var_system_crypto_policy='FIPS' | ||
| 513 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 514 | rc=$? | ||
| 515 | if·test·"$rc"·=·127;·then | ||
| 516 | » echo·"$stderr_of_call"·>&2 | ||
| 517 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 518 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 519 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 520 | » false··#·end·with·an·error·code | ||
| 521 | elif·test·"$rc"·!=·0;·then | ||
| 522 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 523 | » false··#·end·with·an·error·code | ||
| 524 | fi | ||
| 511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 516 | --- | 530 | --- |
| 517 | apiVersion:·machineconfiguration.openshift.io/v1 | 531 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 529, 33 lines modified | Offset 548, 14 lines modified | ||
| 529 | ············Before=kubelet.service | 548 | ············Before=kubelet.service |
| 530 | ············[Service] | 549 | ············[Service] |
| 531 | ············Type=oneshot | 550 | ············Type=oneshot |
| 532 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 551 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 533 | ············RemainAfterExit=yes | 552 | ············RemainAfterExit=yes |
| 534 | ············[Install] | 553 | ············[Install] |
| 535 | ············WantedBy=multi-user.target | 554 | ············WantedBy=multi-user.target |
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 537 | var_system_crypto_policy='FIPS' | ||
| 538 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 539 | rc=$? | ||
| 540 | if·test·"$rc"·=·127;·then | ||
| 541 | » echo·"$stderr_of_call"·>&2 | ||
| 542 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 543 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 544 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 545 | » false··#·end·with·an·error·code | ||
| 546 | elif·test·"$rc"·!=·0;·then | ||
| 547 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 548 | » false··#·end·with·an·error·code | ||
| 549 | fi | ||
| 550 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 555 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 551 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 556 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 552 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 557 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 553 | Severity: ···medium | 558 | Severity: ···medium |
| 554 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 559 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 555 | Identifiers:·CCE-80939-2 | 560 | Identifiers:·CCE-80939-2 |
| 556 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 561 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1553, 14 lines modified | Offset 1553, 25 lines modified | ||
| 1553 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1553 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1554 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1554 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1555 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 | 1555 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1556 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1556 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1557 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1557 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-08-040180 | 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-08-040180 |
| 1559 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule | 1559 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule |
| 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1561 | [customizations.services] | ||
| 1562 | masked·=·["debug-shell"] | ||
| 1563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1568 | service·disable·debug-shell | ||
| 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1572 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1573 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1565 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1574 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1566 | ····the·System | 1575 | ····the·System |
| Offset 1638, 44 lines modified | Offset 1649, 14 lines modified | ||
| 1638 | ··-·NIST-800-53-CM-6 | 1649 | ··-·NIST-800-53-CM-6 |
| 1639 | ··-·disable_strategy | 1650 | ··-·disable_strategy |
| 1640 | ··-·low_complexity | 1651 | ··-·low_complexity |
| 1641 | ··-·low_disruption | 1652 | ··-·low_disruption |
| 1642 | ··-·medium_severity | 1653 | ··-·medium_severity |
| 1643 | ··-·no_reboot_needed | 1654 | ··-·no_reboot_needed |
| 1644 | ··-·service_debug-shell_disabled | 1655 | ··-·service_debug-shell_disabled |
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1646 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1647 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1648 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1649 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1650 | service·disable·debug-shell | ||
| 1651 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1652 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1653 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 150172/156731 bytes (95.82%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·2020·2861·7320·6f66·2032·3032·3 | 00038760:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038770:·2d3 | 00038770:·2d30·3929·0a20·2020·2020·2020·2020·2020··-09).··········· | ||
| 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 17360, 236 lines modified | Offset 17360, 236 lines modified | ||
| 00043cf0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 00043cf0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 00043d00:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00043d00:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00043d10:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00043d10:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00043d20:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00043d20:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00043d30:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00043d30:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00043d40:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00043d40:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00043d50:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00043d50:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00043d60:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00043d70:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00043d80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00043d90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00043da0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00043db0:·643d·2269·646d·3739·3830·223e·3c70·7265··d="idm7980"><pre | |||
| 00043d60:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00043d70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00043d80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00043d90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00043da0:·7073·6522·2069·643d·2269·646d·3739·3830··pse"·id="idm7980 | |||
| 00043db0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00043dc0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00043dd0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00043de0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00043df0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00043e00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00043e10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00043e20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00043e30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00043e40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00043e50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00043e60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00043e70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00043e80:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00043e90:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00043ea0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00043eb0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 00043ec0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00043ed0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00043ee0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 00043ef0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 00043f00:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00043f10:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00043f20:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00043f30:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00043f40:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00043f50:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00043f60:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 00043f70:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 00043f80:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 00043f90:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 00043fa0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 00043fb0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 00043fc0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 00043fd0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 00043fe0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00043ff0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00044000:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00044010:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 00044020:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00044030:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 00044040:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 00044050:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 00044060:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00044070:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00044080:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00044090:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 000440a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 000440b0:·6964·6d37·3938·3122·2074·6162·696e·6465··idm7981"·tabinde | |||
| 000440c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 000440d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 000440e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 000440f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00044100:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00044110:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 00044120:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00044130:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00044140:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00044150:·2220·6964·3d22·6964·6d37·3938·3122·3e3c··"·id="idm7981">< | |||
| 00044160:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00044170:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00044180:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00044190:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 000441a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 000441b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000441c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000441d0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 000441e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000441f0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00044200:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00044210:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00044220:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00044230:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00044240:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0004 | 00043dc0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 00043dd0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 00043de0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 00044260:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 00044270:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00044280:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00044290:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 000442a0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 000442b0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 000442c0:·6964·6d37·3938·3222·2074·6162·696e·6465··idm7982"·tabinde | |||
| 000442d0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 000442e0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 000442f0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00044300:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00044310:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00044320:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 00044330:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 00044340:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| Max diff block lines reached; 2596349/2628833 bytes (98.76%) of diff not shown. | |||
| Offset 55, 15 lines modified | Offset 55, 15 lines modified | ||
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 585, 14 lines modified | Offset 585, 33 lines modified | ||
| 585 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 585 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 586 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 586 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 587 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 587 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 588 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 588 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 589 | ·············_\x8c_\x8i_\x8s············5.3.1 | 589 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 590 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 590 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 591 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 591 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 593 | [[packages]] | ||
| 594 | name·=·"aide" | ||
| 595 | version·=·"*" | ||
| 596 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 597 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 598 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 599 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 600 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 601 | package·--add=aide | ||
| 602 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 603 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 604 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 605 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 606 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 607 | package·install·aide | ||
| 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 608 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 609 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 610 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 611 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 612 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 597 | -·name:·Ensure·aide·is·installed | 613 | -·name:·Ensure·aide·is·installed |
| 598 | ··package: | 614 | ··package: |
| Offset 608, 26 lines modified | Offset 627, 14 lines modified | ||
| 608 | ··-·PCI-DSSv4-11.5.2 | 627 | ··-·PCI-DSSv4-11.5.2 |
| 609 | ··-·enable_strategy | 628 | ··-·enable_strategy |
| 610 | ··-·low_complexity | 629 | ··-·low_complexity |
| 611 | ··-·low_disruption | 630 | ··-·low_disruption |
| 612 | ··-·medium_severity | 631 | ··-·medium_severity |
| 613 | ··-·no_reboot_needed | 632 | ··-·no_reboot_needed |
| 614 | ··-·package_aide_installed | 633 | ··-·package_aide_installed |
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 620 | package·install·aide | ||
| 621 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 622 | [[packages]] | ||
| 623 | name·=·"aide" | ||
| 624 | version·=·"*" | ||
| 625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 630 | #·Remediation·is·applicable·only·in·certain·platforms | 639 | #·Remediation·is·applicable·only·in·certain·platforms |
| 631 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 640 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 647, 21 lines modified | Offset 654, 14 lines modified | ||
| 647 | include·install_aide | 654 | include·install_aide |
| 648 | class·install_aide·{ | 655 | class·install_aide·{ |
| 649 | ··package·{·'aide': | 656 | ··package·{·'aide': |
| 650 | ····ensure·=>·'installed', | 657 | ····ensure·=>·'installed', |
| 651 | ··} | 658 | ··} |
| 652 | } | 659 | } |
| 653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 657 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 658 | package·--add=aide | ||
| 659 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 660 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 661 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 661 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 662 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 662 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 663 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 663 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 664 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 683, 14 lines modified | Offset 683, 18 lines modified | ||
| 683 | ·············_\x8i_\x8s_\x8m······1446 | 683 | ·············_\x8i_\x8s_\x8m······1446 |
| 684 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 684 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 685 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 685 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 686 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 686 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 687 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 687 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 691 | [customizations] | ||
| 692 | fips·=·true | ||
| 690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 691 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 692 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 695 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 693 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 696 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 694 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 697 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 695 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 698 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 696 | ··set_fact: | 699 | ··set_fact: |
| Offset 794, 18 lines modified | Offset 798, 14 lines modified | ||
| 794 | ··-·NIST-800-53-SC-13 | 798 | ··-·NIST-800-53-SC-13 |
| 795 | ··-·enable_fips_mode | 799 | ··-·enable_fips_mode |
| 796 | ··-·high_severity | 800 | ··-·high_severity |
| 797 | ··-·medium_complexity | 801 | ··-·medium_complexity |
| 798 | ··-·medium_disruption | 802 | ··-·medium_disruption |
| 799 | ··-·reboot_required | 803 | ··-·reboot_required |
| 800 | ··-·restrict_strategy | 804 | ··-·restrict_strategy |
| 801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 218244/224532 bytes (97.20%) of diff not shown. | |||
| Offset 14442, 15 lines modified | Offset 14442, 15 lines modified | ||
| 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038700:·6173·206f·6620·3230·323 | 00038700:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15257, 237 lines modified | Offset 15257, 237 lines modified | ||
| 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b9f0:·6564·6961·7469·6f6e·204 | 0003b9f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003ba00:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003ba10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ba20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ba30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ba40:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003ba00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ba10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ba20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ba30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ba40:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003ba50:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ba60:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ba70:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003ba80:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ba90:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003baa0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bab0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bac0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bad0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bae0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003baf0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bb00:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bb10:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bb20:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bb30:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bb40:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bb50:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bb60:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bb70:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bb80:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bb90:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003bba0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003bbb0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003bbc0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003bbd0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003bbe0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003bbf0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bc00:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bc10:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bc20:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bc30:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc40:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc50:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc60:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bc70:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bc80:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bc90:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bca0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bcb0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bcc0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bcd0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bce0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bcf0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bd00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bd10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bd20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bd30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bd40:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bd50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bd60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bd70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bd80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bd90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bda0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bdb0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bdc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bdd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bde0:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003bdf0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003be00:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003be10:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003be20:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003be30:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003be40:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003be50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003be60:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003be70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003be80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003be90:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bea0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003beb0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bec0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bed0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003ba50:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003ba60:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ba70:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bef0:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003bf00:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf10:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf20:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bf30:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bf40:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bf50:·743d·2223·6964·6d37·3938·3222·2074·6162··t="#idm7982"·tab | |||
| 0003bf60:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bf70:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bf80:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bf90:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bfa0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bfb0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003bfc0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003bfd0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bfe0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bff0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| Max diff block lines reached; 4706354/4738838 bytes (99.31%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 33 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 143 | ··package: |
| Offset 137, 26 lines modified | Offset 156, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 158 | ··-·low_complexity |
| 140 | ··-·low_disruption | 159 | ··-·low_disruption |
| 141 | ··-·medium_severity | 160 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·install·aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 21 lines modified | Offset 183, 14 lines modified | ||
| 176 | include·install_aide | 183 | include·install_aide |
| 177 | class·install_aide·{ | 184 | class·install_aide·{ |
| 178 | ··package·{·'aide': | 185 | ··package·{·'aide': |
| 179 | ····ensure·=>·'installed', | 186 | ····ensure·=>·'installed', |
| 180 | ··} | 187 | ··} |
| 181 | } | 188 | } |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·--add=aide | ||
| 188 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 189 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 189 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 190 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 190 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 191 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 191 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 192 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 314, 14 lines modified | Offset 314, 18 lines modified | ||
| 314 | ·············_\x8i_\x8s_\x8m······1446 | 314 | ·············_\x8i_\x8s_\x8m······1446 |
| 315 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 315 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 316 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 316 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 317 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 317 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 318 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 318 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 319 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 319 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 320 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 320 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 322 | [customizations] | ||
| 323 | fips·=·true | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 329 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 327 | ··set_fact: | 330 | ··set_fact: |
| Offset 425, 18 lines modified | Offset 429, 14 lines modified | ||
| 425 | ··-·NIST-800-53-SC-13 | 429 | ··-·NIST-800-53-SC-13 |
| 426 | ··-·enable_fips_mode | 430 | ··-·enable_fips_mode |
| 427 | ··-·high_severity | 431 | ··-·high_severity |
| 428 | ··-·medium_complexity | 432 | ··-·medium_complexity |
| 429 | ··-·medium_disruption | 433 | ··-·medium_disruption |
| 430 | ··-·reboot_required | 434 | ··-·reboot_required |
| 431 | ··-·restrict_strategy | 435 | ··-·restrict_strategy |
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 474893/481201 bytes (98.69%) of diff not shown. | |||
| Offset 14437, 15 lines modified | Offset 14437, 15 lines modified | ||
| 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000386b0:·3032·3 | 000386b0:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16662, 237 lines modified | Offset 16662, 237 lines modified | ||
| 00041150:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00041150:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00041160:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 00041160:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 00041170:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00041170:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00041180:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00041180:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00041190:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00041190:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000411a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000411a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000411b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000411b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000411c0:·6d65·6469·6174·696f·6e20·4 | 000411c0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 000411d0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 000411e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000411f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041200:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041210:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 000411d0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 000411e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000411f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041200:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041210:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 00041220:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041230:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041240:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00041250:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041260:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041270:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00041280:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00041290:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 000412a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000412b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000412c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000412d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 000412e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000412f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00041300:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00041310:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 00041320:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 00041330:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 00041340:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 00041350:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 00041360:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00041370:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00041380:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00041390:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000413a0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000413b0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 000413c0:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 000413d0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 000413e0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 000413f0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 00041400:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 00041410:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 00041420:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 00041430:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 00041440:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 00041450:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00041460:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00041470:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00041480:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00041490:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 000414a0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 000414b0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 000414c0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 000414d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000414e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 000414f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00041500:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00041510:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 00041520:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00041530:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00041540:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00041550:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00041560:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00041570:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00041580:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00041590:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000415a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000415b0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 000415c0:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 000415d0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 000415e0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000415f0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041600:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041610:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041620:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041630:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00041640:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041650:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041660:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00041670:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00041680:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00041690:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 000416a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00041 | 00041220:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 00041230:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00041240:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 000416c0:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 000416d0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 000416e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000416f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00041700:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00041710:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00041720:·6574·3d22·2369·646d·3739·3832·2220·7461··et="#idm7982"·ta | |||
| 00041730:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00041740:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00041750:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00041760:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00041770:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00041780:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00041790:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000417a0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 000417b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000417c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 2904894/2937378 bytes (98.89%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 437, 14 lines modified | Offset 437, 33 lines modified | ||
| 437 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 437 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 439 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 439 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 440 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ·············_\x8c_\x8i_\x8s············5.3.1 | 441 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 442 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 443 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 445 | [[packages]] | ||
| 446 | name·=·"aide" | ||
| 447 | version·=·"*" | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 453 | package·--add=aide | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·install·aide | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 449 | -·name:·Ensure·aide·is·installed | 465 | -·name:·Ensure·aide·is·installed |
| 450 | ··package: | 466 | ··package: |
| Offset 460, 26 lines modified | Offset 479, 14 lines modified | ||
| 460 | ··-·PCI-DSSv4-11.5.2 | 479 | ··-·PCI-DSSv4-11.5.2 |
| 461 | ··-·enable_strategy | 480 | ··-·enable_strategy |
| 462 | ··-·low_complexity | 481 | ··-·low_complexity |
| 463 | ··-·low_disruption | 482 | ··-·low_disruption |
| 464 | ··-·medium_severity | 483 | ··-·medium_severity |
| 465 | ··-·no_reboot_needed | 484 | ··-·no_reboot_needed |
| 466 | ··-·package_aide_installed | 485 | ··-·package_aide_installed |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 472 | package·install·aide | ||
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 474 | [[packages]] | ||
| 475 | name·=·"aide" | ||
| 476 | version·=·"*" | ||
| 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 482 | #·Remediation·is·applicable·only·in·certain·platforms | 491 | #·Remediation·is·applicable·only·in·certain·platforms |
| 483 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 492 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 499, 21 lines modified | Offset 506, 14 lines modified | ||
| 499 | include·install_aide | 506 | include·install_aide |
| 500 | class·install_aide·{ | 507 | class·install_aide·{ |
| 501 | ··package·{·'aide': | 508 | ··package·{·'aide': |
| 502 | ····ensure·=>·'installed', | 509 | ····ensure·=>·'installed', |
| 503 | ··} | 510 | ··} |
| 504 | } | 511 | } |
| 505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 510 | package·--add=aide | ||
| 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 512 | Run·the·following·command·to·generate·a·new·database: | 513 | Run·the·following·command·to·generate·a·new·database: |
| 513 | $·sudo·/usr/sbin/aide·--init | 514 | $·sudo·/usr/sbin/aide·--init |
| 514 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 515 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 515 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 516 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 516 | To·initiate·a·manual·check,·run·the·following·command: | 517 | To·initiate·a·manual·check,·run·the·following·command: |
| 517 | $·sudo·/usr/sbin/aide·--check | 518 | $·sudo·/usr/sbin/aide·--check |
| Offset 874, 14 lines modified | Offset 874, 33 lines modified | ||
| 874 | ··-·PCI-DSSv4-2.2.7 | 874 | ··-·PCI-DSSv4-2.2.7 |
| 875 | ··-·configure_crypto_policy | 875 | ··-·configure_crypto_policy |
| 876 | ··-·high_severity | 876 | ··-·high_severity |
| 877 | ··-·low_complexity | 877 | ··-·low_complexity |
| 878 | ··-·low_disruption | 878 | ··-·low_disruption |
| 879 | ··-·no_reboot_needed | 879 | ··-·no_reboot_needed |
| 880 | ··-·restrict_strategy | 880 | ··-·restrict_strategy |
| 881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 882 | var_system_crypto_policy='DEFAULT' | ||
| 883 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 884 | rc=$? | ||
| 885 | if·test·"$rc"·=·127;·then | ||
| 886 | » echo·"$stderr_of_call"·>&2 | ||
| 887 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 888 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 889 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 890 | » false··#·end·with·an·error·code | ||
| 891 | elif·test·"$rc"·!=·0;·then | ||
| 892 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 893 | » false··#·end·with·an·error·code | ||
| 894 | fi | ||
| 881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 895 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 882 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 896 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 226968/232448 bytes (97.64%) of diff not shown. | |||
| Offset 14446, 15 lines modified | Offset 14446, 15 lines modified | ||
| 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038740:·206f·6620·3230·323 | 00038740:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | ||
| 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bba0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bbb0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bbc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bbd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bbe0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bbf0:·6964·6d37·3938·3022·3e3c·7072·653e·3c63··idm7980"><pre><c | |||
| 0003bba0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bbb0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bbc0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bbd0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bbe0:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | |||
| 0003bbf0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bc00:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bc10:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bc20:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bc30:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bc40:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bc50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bc60:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bc70:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bc80:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bc90:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bca0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bcb0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bcc0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bcd0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bce0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003bcf0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003bd00:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003bd10:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bd20:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003bd30:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003bd40:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003bd50:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003bd60:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003bd70:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003bd80:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003bd90:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003bda0:·4345·2d38·3038·3434·2d34·0a20·202d·2043··CE-80844-4.··-·C | |||
| 0003bdb0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bdc0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bdd0:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003bde0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bdf0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003be00:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003be10:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003be20:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003be30:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003be40:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003be50:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003be60:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003be70:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003be80:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003be90:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003bea0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003beb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bec0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bed0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bee0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bef0:·3739·3831·2220·7461·6269·6e64·6578·3d22··7981"·tabindex=" | |||
| 0003bf00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bf10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf50:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003bf60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bf70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bf80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bf90:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 0003bfa0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bfb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bfc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bfd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bfe0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bff0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c000:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c010:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c020:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c030:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c040:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c050:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c060:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c070:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c080:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c0 | 0003bc00:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | ||
| 0003bc10:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bc20:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003c0a0:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 0003c0b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c0c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c0d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c0e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c0f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c100:·3739·3832·2220·7461·6269·6e64·6578·3d22··7982"·tabindex=" | |||
| 0003c110:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c120:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c130:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c140:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c150:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c160:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003c170:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003c180:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c190:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| Max diff block lines reached; 4875804/4908150 bytes (99.34%) of diff not shown. | |||
| Offset 54, 15 lines modified | Offset 54, 15 lines modified | ||
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 59 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 59 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 60 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 60 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 61 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 61 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 62 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 63 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 63 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 64 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 64 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 65 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 65 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 66 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············5.3.1 | 123 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 142, 26 lines modified | Offset 161, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 163 | ··-·low_complexity |
| 145 | ··-·low_disruption | 164 | ··-·low_disruption |
| 146 | ··-·medium_severity | 165 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 188, 14 lines modified | ||
| 181 | include·install_aide | 188 | include·install_aide |
| 182 | class·install_aide·{ | 189 | class·install_aide·{ |
| 183 | ··package·{·'aide': | 190 | ··package·{·'aide': |
| 184 | ····ensure·=>·'installed', | 191 | ····ensure·=>·'installed', |
| 185 | ··} | 192 | ··} |
| 186 | } | 193 | } |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 1784, 14 lines modified | Offset 1784, 18 lines modified | ||
| 1784 | ·············_\x8i_\x8s_\x8m······1446 | 1784 | ·············_\x8i_\x8s_\x8m······1446 |
| 1785 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1785 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1786 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1786 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1787 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1787 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1788 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1788 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1789 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 1789 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 1790 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1790 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1792 | [customizations] | ||
| 1793 | fips·=·true | ||
| 1791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1792 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1793 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1794 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1795 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1796 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1799 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1797 | ··set_fact: | 1800 | ··set_fact: |
| Offset 1895, 18 lines modified | Offset 1899, 14 lines modified | ||
| 1895 | ··-·NIST-800-53-SC-13 | 1899 | ··-·NIST-800-53-SC-13 |
| 1896 | ··-·enable_fips_mode | 1900 | ··-·enable_fips_mode |
| 1897 | ··-·high_severity | 1901 | ··-·high_severity |
| 1898 | ··-·medium_complexity | 1902 | ··-·medium_complexity |
| 1899 | ··-·medium_disruption | 1903 | ··-·medium_disruption |
| 1900 | ··-·reboot_required | 1904 | ··-·reboot_required |
| 1901 | ··-·restrict_strategy | 1905 | ··-·restrict_strategy |
| 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 434551/440453 bytes (98.66%) of diff not shown. | |||
| Offset 14470, 16 lines modified | Offset 14470, 16 lines modified | ||
| 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000388c0:·2028·6173·206f·6620·3230·323 | 000388c0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 000388d0:·3 | 000388d0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15303, 236 lines modified | Offset 15303, 236 lines modified | ||
| 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bcd0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003bce0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bcf0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bd00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bd10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bd20:·2269·646d·3739·3830·223e·3c70·7265·3e3c··"idm7980"><pre>< | |||
| 0003bcd0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bce0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bcf0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bd00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bd10:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bd20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bd30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bd40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bd50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bd60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bd70:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bd80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bd90:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bda0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bdb0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bdc0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bdd0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bde0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bdf0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003be00:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003be10:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003be20:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003be30:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003be40:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003be50:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003be60:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003be70:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003be80:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003be90:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003bea0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003beb0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003bec0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003bed0:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bee0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bef0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bf00:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bf10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bf20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bf30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bf40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bf50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003bf60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003bf70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003bf80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003bf90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003bfa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003bfb0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bfc0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003bfd0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bfe0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bff0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c000:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c010:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c020:·6d37·3938·3122·2074·6162·696e·6465·783d··m7981"·tabindex= | |||
| 0003c030:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c040:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c050:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c060:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c070:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c080:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003c090:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c0a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c0b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c0c0:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 0003c0d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c0e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c0f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c100:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c110:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c120:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c130:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c140:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c150:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c160:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c170:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c190:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c1a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c1b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003 | 0003bd30:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | ||
| 0003bd40:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003bd50:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c1d0:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 0003c1e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c1f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c200:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c210:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c220:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c230:·6d37·3938·3222·2074·6162·696e·6465·783d··m7982"·tabindex= | |||
| 0003c240:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c250:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c260:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c270:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c280:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c290:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003c2a0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003c2b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| Max diff block lines reached; 4794296/4826780 bytes (99.33%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 124, 14 lines modified | Offset 124, 33 lines modified | ||
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 126 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8c_\x8i_\x8s············5.3.1 | 128 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 129 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·--add=aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·install·aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 152 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 153 | ··package: |
| Offset 147, 26 lines modified | Offset 166, 14 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 168 | ··-·low_complexity |
| 150 | ··-·low_disruption | 169 | ··-·low_disruption |
| 151 | ··-·medium_severity | 170 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·install·aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | 178 | #·Remediation·is·applicable·only·in·certain·platforms |
| 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 186, 21 lines modified | Offset 193, 14 lines modified | ||
| 186 | include·install_aide | 193 | include·install_aide |
| 187 | class·install_aide·{ | 194 | class·install_aide·{ |
| 188 | ··package·{·'aide': | 195 | ··package·{·'aide': |
| 189 | ····ensure·=>·'installed', | 196 | ····ensure·=>·'installed', |
| 190 | ··} | 197 | ··} |
| 191 | } | 198 | } |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·--add=aide | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 204 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 205 | $·sudo·/usr/sbin/aide·--check |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ·············_\x8i_\x8s_\x8m······1446 | 1789 | ·············_\x8i_\x8s_\x8m······1446 |
| 1790 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1790 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1791 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1791 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1792 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1792 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1793 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1793 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1794 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 1794 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 1795 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1795 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations] | ||
| 1798 | fips·=·true | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1801 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1804 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1802 | ··set_fact: | 1805 | ··set_fact: |
| Offset 1900, 18 lines modified | Offset 1904, 14 lines modified | ||
| 1900 | ··-·NIST-800-53-SC-13 | 1904 | ··-·NIST-800-53-SC-13 |
| 1901 | ··-·enable_fips_mode | 1905 | ··-·enable_fips_mode |
| 1902 | ··-·high_severity | 1906 | ··-·high_severity |
| 1903 | ··-·medium_complexity | 1907 | ··-·medium_complexity |
| 1904 | ··-·medium_disruption | 1908 | ··-·medium_disruption |
| 1905 | ··-·reboot_required | 1909 | ··-·reboot_required |
| 1906 | ··-·restrict_strategy | 1910 | ··-·restrict_strategy |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 426867/432769 bytes (98.64%) of diff not shown. | |||
| Offset 14316, 16 lines modified | Offset 14316, 16 lines modified | ||
| 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f20:·2861·7320·6f66·2032·3032·3 | 00037f20:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f30:·3 | 00037f30:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15108, 237 lines modified | Offset 15108, 237 lines modified | ||
| 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b0a0:·656d·6564·6961·7469·6f6e·204 | 0003b0a0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b0b0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b0c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b0d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b0e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b0f0:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b0b0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b0c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b0d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b0e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b0f0:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b100:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b110:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b120:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b130:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b140:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b150:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b160:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b170:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b180:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b190:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b1a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b1c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b1d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b1e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b1f0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b200:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b210:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b220:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b230:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b240:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b250:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b260:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b270:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b280:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b290:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b2a0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b2b0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b2c0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b2d0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b2e0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b2f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b300:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b310:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b320:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b330:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b340:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b350:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b360:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b370:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b380:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b390:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b3a0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b3b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b3c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b3d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b3e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b3f0:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | |||
| 0003b400:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b410:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b420:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b430:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b440:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b450:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b460:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b470:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b480:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b490:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b4a0:·3430·3722·3e3c·7461·626c·6520·636c·6173··407"><table·clas | |||
| 0003b4b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b4c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b4d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b4e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b500:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b520:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b530:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b540:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b550:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b560:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b570:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b580:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b100:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b110:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b120:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b130:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b5a0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003b5b0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b5c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b5f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b600:·6765·743d·2223·6964·6d38·3430·3822·2074··get="#idm8408"·t | |||
| 0003b610:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b620:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b630:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b640:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b650:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b660:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b670:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b680:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| Max diff block lines reached; 3983596/4016218 bytes (99.19%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Ensure·aide·is·installed | 131 | -·name:·Ensure·aide·is·installed |
| 116 | ··package: | 132 | ··package: |
| Offset 126, 26 lines modified | Offset 145, 14 lines modified | ||
| 126 | ··-·PCI-DSSv4-11.5.2 | 145 | ··-·PCI-DSSv4-11.5.2 |
| 127 | ··-·enable_strategy | 146 | ··-·enable_strategy |
| 128 | ··-·low_complexity | 147 | ··-·low_complexity |
| 129 | ··-·low_disruption | 148 | ··-·low_disruption |
| 130 | ··-·medium_severity | 149 | ··-·medium_severity |
| 131 | ··-·no_reboot_needed | 150 | ··-·no_reboot_needed |
| 132 | ··-·package_aide_installed | 151 | ··-·package_aide_installed |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 157 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 165, 21 lines modified | Offset 172, 14 lines modified | ||
| 165 | include·install_aide | 172 | include·install_aide |
| 166 | class·install_aide·{ | 173 | class·install_aide·{ |
| 167 | ··package·{·'aide': | 174 | ··package·{·'aide': |
| 168 | ····ensure·=>·'installed', | 175 | ····ensure·=>·'installed', |
| 169 | ··} | 176 | ··} |
| 170 | } | 177 | } |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·--add=aide | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 182 | To·initiate·a·manual·check,·run·the·following·command: | 183 | To·initiate·a·manual·check,·run·the·following·command: |
| 183 | $·sudo·/usr/sbin/aide·--check | 184 | $·sudo·/usr/sbin/aide·--check |
| Offset 321, 51 lines modified | Offset 321, 51 lines modified | ||
| 321 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 321 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 322 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 322 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 323 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 323 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 324 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 324 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 325 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 325 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 326 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 326 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | logvol·/home·1024 | ||
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | [[customizations.filesystem]] | 329 | [[customizations.filesystem]] |
| 332 | mountpoint·=·"/home" | 330 | mountpoint·=·"/home" |
| 333 | size·=·1073741824 | 331 | size·=·1073741824 |
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 339 | part·/home | 337 | part·/home |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | logvol·/home·1024 | ||
| 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 341 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 342 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 342 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 247790/254234 bytes (97.47%) of diff not shown. | |||
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·2861·7320·6f66·2032·3032·3 | 00037f10:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f20:·3 | 00037f20:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15113, 237 lines modified | Offset 15113, 237 lines modified | ||
| 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b100:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b110:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b120:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b130:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b140:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b150:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b160:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b170:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b180:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b190:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b1a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b1b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b1c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b200:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b210:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b220:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b230:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b240:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b250:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b260:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b270:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b280:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b290:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b2a0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b2b0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b2c0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b2d0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b2e0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b2f0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b300:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b310:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b320:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b330:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b340:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b350:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b360:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b370:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b380:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b390:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b3a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b3b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b3c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b3f0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b400:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b410:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b420:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b430:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b440:·7461·7267·6574·3d22·2369·646d·3834·3037··target="#idm8407 | |||
| 0003b450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4b0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b4c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b4d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b4e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b4f0:·646d·3834·3037·223e·3c74·6162·6c65·2063··dm8407"><table·c | |||
| 0003b500:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b510:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b520:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b530:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b540:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b550:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b560:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b570:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b580:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b590:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b5a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b5b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b5c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b5d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b5e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b5f0:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003b600:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003b610:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b620:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b630:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b640:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b650:·7461·7267·6574·3d22·2369·646d·3834·3038··target="#idm8408 | |||
| 0003b660:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b670:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b680:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b690:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b6a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b6b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b6c0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b6d0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b6e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b6f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b700:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b710:·3d22·6964·6d38·3430·3822·3e3c·7072·653e··="idm8408"><pre> | |||
| 0003b720:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b730:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b740:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b750:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| Max diff block lines reached; 4076306/4108928 bytes (99.21%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 104, 14 lines modified | Offset 104, 33 lines modified | ||
| 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 107 | ·············_\x8c_\x8i_\x8s············6.1.1 | 107 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"aide" | ||
| 114 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | package·--add=aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package·install·aide | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | -·name:·Ensure·aide·is·installed | 132 | -·name:·Ensure·aide·is·installed |
| 117 | ··package: | 133 | ··package: |
| Offset 127, 26 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 173, 14 lines modified | ||
| 166 | include·install_aide | 173 | include·install_aide |
| 167 | class·install_aide·{ | 174 | class·install_aide·{ |
| 168 | ··package·{·'aide': | 175 | ··package·{·'aide': |
| 169 | ····ensure·=>·'installed', | 176 | ····ensure·=>·'installed', |
| 170 | ··} | 177 | ··} |
| 171 | } | 178 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | package·--add=aide | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 183 | To·initiate·a·manual·check,·run·the·following·command: | 184 | To·initiate·a·manual·check,·run·the·following·command: |
| 184 | $·sudo·/usr/sbin/aide·--check | 185 | $·sudo·/usr/sbin/aide·--check |
| Offset 826, 51 lines modified | Offset 826, 51 lines modified | ||
| 826 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 826 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 827 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 827 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 828 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 828 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 829 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 829 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 830 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 830 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 831 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 831 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 832 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 832 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 834 | logvol·/home·1024 | ||
| 835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 836 | [[customizations.filesystem]] | 834 | [[customizations.filesystem]] |
| 837 | mountpoint·=·"/home" | 835 | mountpoint·=·"/home" |
| 838 | size·=·1073741824 | 836 | size·=·1073741824 |
| 839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 840 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 838 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 841 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 839 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 842 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 840 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 843 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 841 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 844 | part·/home | 842 | part·/home |
| 843 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 844 | logvol·/home·1024 | ||
| 845 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 845 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 846 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. | 846 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at·installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such·as·an·NFS·server,·then·creating·a·separate·partition·is·not·necessary·at·installation·time,·and·the·mountpoint·can·instead·be·configured·later. |
| 847 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. | 847 | Rationale:···Srv·deserves·files·for·local·network·file·server·such·as·FTP.·Ensuring·that·/srv·is·mounted·on·its·own·partition·enables·the·setting·of·more·restrictive·mount·options,·and·also·helps·ensure·that·users·cannot·trivially·fill·partitions·used·for·log·or·audit·data·storage. |
| Max diff block lines reached; 256825/263216 bytes (97.57%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f40:·3 | 00037f40:·3929·0a20·2020·2020·2020·2020·2020·2020··9).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15104, 236 lines modified | Offset 15104, 236 lines modified | ||
| 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | ||
| 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b060:·6469·6174·696f·6e20·4 | 0003b060:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b070:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b080:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b090:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0b0:·2220·6964·3d22·6964·6d38·3430·3622·3e3c··"·id="idm8406">< | |||
| 0003b070:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b080:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b090:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b0b0:·3430·3622·3e3c·7461·626c·6520·636c·6173··406"><table·clas | |||
| 0003b0c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b0f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b100:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b110:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b120:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b130:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b140:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b150:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b160:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b170:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b180:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b190:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1a0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1b0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1c0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1d0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1e0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b1f0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b200:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b210:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b220:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b230:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b240:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b250:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b260:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b290:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b2a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2b0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2e0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2f0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b300:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b310:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b320:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b330:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b340:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b350:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b360:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b370:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b380:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b390:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b3a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b3b0:·3d22·2369·646d·3834·3037·2220·7461·6269··="#idm8407"·tabi | |||
| 0003b3c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b3d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b3e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b3f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b400:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b410:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b420:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b430:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b440:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b450:·7073·6522·2069·643d·2269·646d·3834·3037··pse"·id="idm8407 | |||
| 0003b460:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b470:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b480:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b490:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b4a0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b4b0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b4c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4d0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b4e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b500:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b510:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b520:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b530:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b540:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b | 0003b0c0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | ||
| 0003b0d0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0e0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b560:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003b570:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b580:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b590:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b5a0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b5b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b5c0:·3d22·2369·646d·3834·3038·2220·7461·6269··="#idm8408"·tabi | |||
| 0003b5d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b5e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b5f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b600:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b610:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b620:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b630:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b640:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b650:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| Max diff block lines reached; 2581696/2614180 bytes (98.76%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 142, 26 lines modified | Offset 161, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 163 | ··-·low_complexity |
| 145 | ··-·low_disruption | 164 | ··-·low_disruption |
| 146 | ··-·medium_severity | 165 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 188, 14 lines modified | ||
| 181 | include·install_aide | 188 | include·install_aide |
| 182 | class·install_aide·{ | 189 | class·install_aide·{ |
| 183 | ··package·{·'aide': | 190 | ··package·{·'aide': |
| 184 | ····ensure·=>·'installed', | 191 | ····ensure·=>·'installed', |
| 185 | ··} | 192 | ··} |
| 186 | } | 193 | } |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 360, 57 lines modified | Offset 360, 57 lines modified | ||
| 360 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) | 360 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·SC-5(2) |
| 361 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 | 361 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-4 |
| 362 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 362 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 363 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 363 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 364 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 364 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 365 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 365 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | logvol·/home·1024 | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | [[customizations.filesystem]] | 368 | [[customizations.filesystem]] |
| 371 | mountpoint·=·"/home" | 369 | mountpoint·=·"/home" |
| 372 | size·=·1073741824 | 370 | size·=·1073741824 |
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 378 | part·/home | 376 | part·/home |
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 378 | logvol·/home·1024 | ||
| 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 379 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·/\x8/s\x8sr\x8rv\x8v·L\x8Lo\x8oc\x8ca\x8at\x8te\x8ed\x8d·O\x8On\x8n·S\x8Se\x8ep\x8pa\x8ar\x8ra\x8at\x8te\x8e·P\x8Pa\x8ar\x8rt\x8ti\x8it\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at | 380 | If·a·file·server·(FTP,·TFTP...)·is·hosted·locally,·create·a·separate·partition·for·/srv·at |
| 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such | 381 | installation·time·(or·migrate·it·later·using·LVM).·If·/srv·will·be·mounted·from·another·system·such |
| Max diff block lines reached; 173689/179674 bytes (96.67%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037f20:·6f66·2032·3032·3 | 00037f20:·6f66·2032·3032·342d·3131·2d30·3929·0a20··of·2024-11-09).· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14766, 218 lines modified | Offset 14766, 218 lines modified | ||
| 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | ||
| 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039b40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039b50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039b60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039b70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039b80:·7365·2220·6964·3d22·6964·6d31·3237·3539··se"·id="idm12759 | |||
| 00039b90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039ba0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039bb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039bc0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039bd0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039be0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039bf0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039c00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039c10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039c20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039 | 00039b40:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 00039b50:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039b60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039b70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039b80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039b90:·3d22·6964·6d31·3237·3539·223e·3c70·7265··="idm12759"><pre | |||
| 00039ba0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00039bb0:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | |||
| 00039bc0:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | |||
| 00039bd0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00039be0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039bf0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039c00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039c10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039c20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039c30:·3132·3736·3022·2074·6162·696e·6465·783d··12760"·tabindex= | |||
| 00039c40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00039c50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00039c60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00039c70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00039c80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00039c90:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 00039ca0:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 00039cb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039cc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039cd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039ce0:·6d31·3237·3630·223e·3c74·6162·6c65·2063··m12760"><table·c | |||
| 00039cf0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00039d00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00039d10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00039d20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00039d30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00039d40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039d50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00039d60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00039d70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039d80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00039d90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00039da0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00039db0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00039 | 00039dc0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 00039dd0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00039de0:·0a70·6163·6b61·6765·202d·2d61·6464·3d64··.package·--add=d | |||
| 00039c50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039c60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039c70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039c80:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039c90:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039ca0:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 00039cb0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00039cc0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039cd0:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039ce0:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039cf0:·3a0a·2020·2d20·4343·452d·3833·3435·342d··:.··-·CCE-83454- | |||
| 00039d00:·390a·2020·2d20·656e·6162·6c65·5f73·7472··9.··-·enable_str | |||
| 00039d10:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039d20:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039d30:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039d40:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039d50:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039d60:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039d | 00039df0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | ||
| 00039d80:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00039d90:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039da0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039db0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039dc0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039dd0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 00039de0:·3237·3630·2220·7461·6269·6e64·6578·3d22··2760"·tabindex=" | |||
| 00039df0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00039e00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00039e10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00039e20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00039e30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00039e40:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 00039e50:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00039e60:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00039e70:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00039e80:·643d·2269·646d·3132·3736·3022·3e3c·7461··d="idm12760"><ta | |||
| 00039e90:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00039ea0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00039eb0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00039ec0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00039ed0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00039ee0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00039ef0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039f00:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00039f10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039f20:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| Max diff block lines reached; 371860/401722 bytes (92.57%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 83, 14 lines modified | Offset 83, 33 lines modified | ||
| 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | [[packages]] | ||
| 92 | name·=·"dnf-automatic" | ||
| 93 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 99 | package·--add=dnf-automatic | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 105 | package·install·dnf-automatic | ||
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 95 | -·name:·Ensure·dnf-automatic·is·installed | 111 | -·name:·Ensure·dnf-automatic·is·installed |
| 96 | ··package: | 112 | ··package: |
| Offset 100, 26 lines modified | Offset 119, 14 lines modified | ||
| 100 | ··-·CCE-83454-9 | 119 | ··-·CCE-83454-9 |
| 101 | ··-·enable_strategy | 120 | ··-·enable_strategy |
| 102 | ··-·low_complexity | 121 | ··-·low_complexity |
| 103 | ··-·low_disruption | 122 | ··-·low_disruption |
| 104 | ··-·medium_severity | 123 | ··-·medium_severity |
| 105 | ··-·no_reboot_needed | 124 | ··-·no_reboot_needed |
| 106 | ··-·package_dnf-automatic_installed | 125 | ··-·package_dnf-automatic_installed |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | package·install·dnf-automatic | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"dnf-automatic" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 122 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 131 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 133, 21 lines modified | Offset 140, 14 lines modified | ||
| 133 | include·install_dnf-automatic | 140 | include·install_dnf-automatic |
| 134 | class·install_dnf-automatic·{ | 141 | class·install_dnf-automatic·{ |
| 135 | ··package·{·'dnf-automatic': | 142 | ··package·{·'dnf-automatic': |
| 136 | ····ensure·=>·'installed', | 143 | ····ensure·=>·'installed', |
| 137 | ··} | 144 | ··} |
| 138 | } | 145 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·--add=dnf-automatic | ||
| 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 146 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 147 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 148 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 148 | automatic.conf. | 149 | automatic.conf. |
| 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 150 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 151 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 152 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9608, 14 lines modified | Offset 9608, 28 lines modified | ||
| 9608 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9608 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9609 | ····························A.9.1.2 | 9609 | ····························A.9.1.2 |
| 9610 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9610 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9611 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9611 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9612 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9612 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9613 | ·············_\x8c_\x8i_\x8s············2.1.3 | 9613 | ·············_\x8c_\x8i_\x8s············2.1.3 |
| 9614 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9614 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9620 | package·--remove=dhcp-server | ||
| 9621 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9622 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9623 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9624 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9625 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9626 | package·remove·dhcp-server | ||
| 9615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9627 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9628 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9629 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9630 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 9631 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 9620 | -·name:·Ensure·dhcp-server·is·removed | 9632 | -·name:·Ensure·dhcp-server·is·removed |
| 9621 | ··package: | 9633 | ··package: |
| Max diff block lines reached; 36017/41735 bytes (86.30%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00037e50:·3 | 00037e50:·312d·3039·290a·2020·2020·2020·2020·2020··1-09).·········· | ||
| 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15291, 130 lines modified | Offset 15291, 130 lines modified | ||
| 0003bba0:·6765·743d·2223·6964·6d39·3230·3222·2074··get="#idm9202"·t | 0003bba0:·6765·743d·2223·6964·6d39·3230·3222·2074··get="#idm9202"·t | ||
| 0003bbb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bbc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bbc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bbd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bbd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bbe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bbe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bbf0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bbf0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003bc00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc10:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003bc20:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc30:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc40:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bc50:·3d22·6964·6d39·3230·3222·3e3c·7072·653e··="idm9202"><pre> | |||
| 0003bc60:·3c63·6f64·653e·0a76·6172·5f73·7973·7465··<code>.var_syste | |||
| 0003bc70:·6d5f·6372·7970·746f·5f70·6f6c·6963·793d··m_crypto_policy= | |||
| 0003bc80:·273c·6162·6272·2074·6974·6c65·3d22·6672··'<abbr·title="fr | |||
| 0003bc90:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 0003bca0:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 0003bcb0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 0003bcc0:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 0003bcd0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003bce0:·6c69·6379·223e·4445·4641·554c·543c·2f61··licy">DEFAULT</a | |||
| 0003bcf0:·6262·723e·270a·0a0a·7374·6465·7272·5f6f··bbr>'...stderr_o | |||
| 0003bd00:·665f·6361·6c6c·3d24·2875·7064·6174·652d··f_call=$(update- | |||
| 0003bc10:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0003bc20:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bc30:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bc40:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bc50:·7365·2220·6964·3d22·6964·6d39·3230·3222··se"·id="idm9202" | |||
| 0003bc60:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bc70:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bc80:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bc90:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bca0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bcb0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bcc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bcd0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bce0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bcf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bd00:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0003bd10:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bd20:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bd30:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003bd40:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bd50:·7072·653e·3c63·6f64·653e·2d2d·2d0a·6170··pre><code>---.ap | |||
| 0003bd60:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 0003bd70:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 0003bd80:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 0003bd90:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 0003bda0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 0003bdb0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| 0003bdc0:·0a20·2020·2020·2076·6572·7369·6f6e·3a20··.······version:· | |||
| 0003bdd0:·332e·312e·300a·2020·2020·7379·7374·656d··3.1.0.····system | |||
| 0003bde0:·643a·0a20·2020·2020·2075·6e69·7473·3a0a··d:.······units:. | |||
| 0003bdf0:·2020·2020·2020·2020·2d20·6e61·6d65·3a20··········-·name:· | |||
| 0003be00:·636f·6e66·6967·7572·652d·6372·7970·746f··configure-crypto | |||
| 0003be10:·2d70·6f6c·6963·792e·7365·7276·6963·650a··-policy.service. | |||
| 0003be20:·2020·2020·2020·2020·2020·656e·6162·6c65············enable | |||
| 0003be30:·643a·2074·7275·650a·2020·2020·2020·2020··d:·true.········ | |||
| 0003be40:·2020·636f·6e74·656e·7473·3a20·7c0a·2020····contents:·|.·· | |||
| 0003be50:·2020·2020·2020·2020·2020·5b55·6e69·745d············[Unit] | |||
| 0003be60:·0a20·2020·2020·2020·2020·2020·2042·6566··.············Bef | |||
| 0003be70:·6f72·653d·6b75·6265·6c65·742e·7365·7276··ore=kubelet.serv | |||
| 0003be80:·6963·650a·2020·2020·2020·2020·2020·2020··ice.············ | |||
| 0003be90:·5b53·6572·7669·6365·5d0a·2020·2020·2020··[Service].······ | |||
| 0003bea0:·2020·2020·2020·5479·7065·3d6f·6e65·7368········Type=onesh | |||
| 0003beb0:·6f74·0a20·2020·2020·2020·2020·2020·2045··ot.············E | |||
| 0003bec0:·7865·6353·7461·7274·3d75·7064·6174·652d··xecStart=update- | |||
| 0003b | 0003bd10:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | ||
| 0003bee0:·2d2d·7365·7420·7b7b·2e76·6172·5f73·7973··--set·{{.var_sys | |||
| 0003bef0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003bf00:·797d·7d0a·2020·2020·2020·2020·2020·2020··y}}.············ | |||
| 0003bf10:·5265·6d61·696e·4166·7465·7245·7869·743d··RemainAfterExit= | |||
| 0003bf20:·7965·730a·2020·2020·2020·2020·2020·2020··yes.············ | |||
| 0003bf30:·5b49·6e73·7461·6c6c·5d0a·2020·2020·2020··[Install].······ | |||
| 0003bf40:·2020·2020·2020·5761·6e74·6564·4279·3d6d········WantedBy=m | |||
| 0003bf50:·756c·7469·2d75·7365·722e·7461·7267·6574··ulti-user.target | |||
| 0003bf60:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf70:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf80:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bf90:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bfa0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bfb0:·743d·2223·6964·6d39·3230·3322·2074·6162··t="#idm9203"·tab | |||
| 0003bfc0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bfd0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bfe0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bff0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c000:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c010:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003c020:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003c030:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c040:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c050:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c060:·6964·6d39·3230·3322·3e3c·7072·653e·3c63··idm9203"><pre><c | |||
| 0003c070:·6f64·653e·0a76·6172·5f73·7973·7465·6d5f··ode>.var_system_ | |||
| 0003c080:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | |||
| 0003c090:·6162·6272·2074·6974·6c65·3d22·6672·6f6d··abbr·title="from | |||
| 0003c0a0:·2050·726f·6669·6c65·2f72·6566·696e·652d···Profile/refine- | |||
| 0003c0b0:·7661·6c75·653a·2078·6363·6466·5f6f·7267··value:·xccdf_org | |||
| 0003c0c0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | |||
| 0003c0d0:·656e·745f·7661·6c75·655f·7661·725f·7379··ent_value_var_sy | |||
| 0003c0e0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003c0f0:·6379·223e·4445·4641·554c·543c·2f61·6262··cy">DEFAULT</abb | |||
| 0003c100:·723e·270a·0a0a·7374·6465·7272·5f6f·665f··r>'...stderr_of_ | |||
| 0003c110:·6361·6c6c·3d24·2875·7064·6174·652d·6372··call=$(update-cr | |||
| 0003c120:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003 | 0003bd20:·2d2d·7365·7420·247b·7661·725f·7379·7374··--set·${var_syst | ||
| 0003 | 0003bd30:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003 | 0003bd40:·7d20·3226·6774·3b26·616d·703b·3120·2667··}·2>&1·&g | ||
| 0003 | 0003bd50:·743b·202f·6465·762f·6e75·6c6c·290a·7263··t;·/dev/null).rc | ||
| 0003 | 0003bd60:·3d24·3f0a·0a69·6620·7465·7374·2022·2472··=$?..if·test·"$r | ||
| Max diff block lines reached; 1651099/1668955 bytes (98.93%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Advanced | 43 | ··············Linux·9·-·Advanced |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 162, 14 lines modified | Offset 162, 33 lines modified | ||
| 162 | ··-·PCI-DSSv4-2.2.7 | 162 | ··-·PCI-DSSv4-2.2.7 |
| 163 | ··-·configure_crypto_policy | 163 | ··-·configure_crypto_policy |
| 164 | ··-·high_severity | 164 | ··-·high_severity |
| 165 | ··-·low_complexity | 165 | ··-·low_complexity |
| 166 | ··-·low_disruption | 166 | ··-·low_disruption |
| 167 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 168 | ··-·restrict_strategy | 168 | ··-·restrict_strategy |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | var_system_crypto_policy='DEFAULT' | ||
| 171 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 172 | rc=$? | ||
| 173 | if·test·"$rc"·=·127;·then | ||
| 174 | » echo·"$stderr_of_call"·>&2 | ||
| 175 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 176 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 177 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 178 | » false··#·end·with·an·error·code | ||
| 179 | elif·test·"$rc"·!=·0;·then | ||
| 180 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 181 | » false··#·end·with·an·error·code | ||
| 182 | fi | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 174 | --- | 188 | --- |
| 175 | apiVersion:·machineconfiguration.openshift.io/v1 | 189 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 187, 33 lines modified | Offset 206, 14 lines modified | ||
| 187 | ············Before=kubelet.service | 206 | ············Before=kubelet.service |
| 188 | ············[Service] | 207 | ············[Service] |
| 189 | ············Type=oneshot | 208 | ············Type=oneshot |
| 190 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 209 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 191 | ············RemainAfterExit=yes | 210 | ············RemainAfterExit=yes |
| 192 | ············[Install] | 211 | ············[Install] |
| 193 | ············WantedBy=multi-user.target | 212 | ············WantedBy=multi-user.target |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | var_system_crypto_policy='DEFAULT' | ||
| 196 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 197 | rc=$? | ||
| 198 | if·test·"$rc"·=·127;·then | ||
| 199 | » echo·"$stderr_of_call"·>&2 | ||
| 200 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 201 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 202 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 203 | » false··#·end·with·an·error·code | ||
| 204 | elif·test·"$rc"·!=·0;·then | ||
| 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 211 | Severity: ···medium | 216 | Severity: ···medium |
| 212 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 213 | Identifiers:·CCE-83445-7 | 218 | Identifiers:·CCE-83445-7 |
| 214 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 219 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1776, 14 lines modified | Offset 1776, 33 lines modified | ||
| 1776 | $·sudo·dnf·install·cryptsetup | 1776 | $·sudo·dnf·install·cryptsetup |
| 1777 | Rationale:···LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. | 1777 | Rationale:···LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. |
| 1778 | Severity: ···medium | 1778 | Severity: ···medium |
| 1779 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed | 1779 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed |
| 1780 | Identifiers:·CCE-86612-9 | 1780 | Identifiers:·CCE-86612-9 |
| 1781 | References:··_\x8c_\x8c_\x8n·····A.25.SEC-RHEL1 | 1781 | References:··_\x8c_\x8c_\x8n·····A.25.SEC-RHEL1 |
| 1782 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 | 1782 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 |
| 1783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1784 | [[packages]] | ||
| 1785 | name·=·"cryptsetup" | ||
| 1786 | version·=·"*" | ||
| 1787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1788 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1789 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1790 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1791 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1792 | package·--add=cryptsetup | ||
| 1793 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1794 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1795 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1796 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1797 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1798 | package·install·cryptsetup | ||
| 1783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1784 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1785 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1786 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1787 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1788 | -·name:·Ensure·cryptsetup·is·installed | 1804 | -·name:·Ensure·cryptsetup·is·installed |
| 1789 | ··package: | 1805 | ··package: |
| Offset 1794, 26 lines modified | Offset 1813, 14 lines modified | ||
| 1794 | ··-·PCI-DSSv4-3.5.1.2 | 1813 | ··-·PCI-DSSv4-3.5.1.2 |
| 1795 | ··-·enable_strategy | 1814 | ··-·enable_strategy |
| 1796 | ··-·low_complexity | 1815 | ··-·low_complexity |
| 1797 | ··-·low_disruption | 1816 | ··-·low_disruption |
| 1798 | ··-·medium_severity | 1817 | ··-·medium_severity |
| 1799 | ··-·no_reboot_needed | 1818 | ··-·no_reboot_needed |
| 1800 | ··-·package_cryptsetup-luks_installed | 1819 | ··-·package_cryptsetup-luks_installed |
| 1801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1802 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 135960/142495 bytes (95.41%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e40:·323 | 00037e40:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15251, 130 lines modified | Offset 15251, 130 lines modified | ||
| 0003b920:·7267·6574·3d22·2369·646d·3932·3032·2220··rget="#idm9202"· | 0003b920:·7267·6574·3d22·2369·646d·3932·3032·2220··rget="#idm9202"· | ||
| 0003b930:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b930:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b940:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b940:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b950:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b950:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b960:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b960:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b970:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b970:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b980:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b980:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b990:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b9a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b9b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b9c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b9d0:·643d·2269·646d·3932·3032·223e·3c70·7265··d="idm9202"><pre | |||
| 0003b9e0:·3e3c·636f·6465·3e0a·7661·725f·7379·7374··><code>.var_syst | |||
| 0003b9f0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003ba00:·3d27·3c61·6262·7220·7469·746c·653d·2266··='<abbr·title="f | |||
| 0003ba10:·726f·6d20·5072·6f66·696c·652f·7265·6669··rom·Profile/refi | |||
| 0003ba20:·6e65·2d76·616c·7565·3a20·7863·6364·665f··ne-value:·xccdf_ | |||
| 0003ba30:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | |||
| 0003ba40:·6f6e·7465·6e74·5f76·616c·7565·5f76·6172··ontent_value_var | |||
| 0003ba50:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003ba60:·6f6c·6963·7922·3e44·4546·4155·4c54·3c2f··olicy">DEFAULT</ | |||
| 0003ba70:·6162·6272·3e27·0a0a·0a73·7464·6572·725f··abbr>'...stderr_ | |||
| 0003ba80:·6f66·5f63·616c·6c3d·2428·7570·6461·7465··of_call=$(update | |||
| 0003b990:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | |||
| 0003b9a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b9b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b9c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b9d0:·7073·6522·2069·643d·2269·646d·3932·3032··pse"·id="idm9202 | |||
| 0003b9e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b9f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ba00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ba10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ba20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ba30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ba40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ba60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ba80:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | |||
| 0003ba90:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | |||
| 0003baa0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bab0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003bac0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bad0:·3c70·7265·3e3c·636f·6465·3e2d·2d2d·0a61··<pre><code>---.a | |||
| 0003bae0:·7069·5665·7273·696f·6e3a·206d·6163·6869··piVersion:·machi | |||
| 0003baf0:·6e65·636f·6e66·6967·7572·6174·696f·6e2e··neconfiguration. | |||
| 0003bb00:·6f70·656e·7368·6966·742e·696f·2f76·310a··openshift.io/v1. | |||
| 0003bb10:·6b69·6e64·3a20·4d61·6368·696e·6543·6f6e··kind:·MachineCon | |||
| 0003bb20:·6669·670a·7370·6563·3a0a·2020·636f·6e66··fig.spec:.··conf | |||
| 0003bb30:·6967·3a0a·2020·2020·6967·6e69·7469·6f6e··ig:.····ignition | |||
| 0003bb40:·3a0a·2020·2020·2020·7665·7273·696f·6e3a··:.······version: | |||
| 0003bb50:·2033·2e31·2e30·0a20·2020·2073·7973·7465···3.1.0.····syste | |||
| 0003bb60:·6d64·3a0a·2020·2020·2020·756e·6974·733a··md:.······units: | |||
| 0003bb70:·0a20·2020·2020·2020·202d·206e·616d·653a··.········-·name: | |||
| 0003bb80:·2063·6f6e·6669·6775·7265·2d63·7279·7074···configure-crypt | |||
| 0003bb90:·6f2d·706f·6c69·6379·2e73·6572·7669·6365··o-policy.service | |||
| 0003bba0:·0a20·2020·2020·2020·2020·2065·6e61·626c··.··········enabl | |||
| 0003bbb0:·6564·3a20·7472·7565·0a20·2020·2020·2020··ed:·true.······· | |||
| 0003bbc0:·2020·2063·6f6e·7465·6e74·733a·207c·0a20·····contents:·|.· | |||
| 0003bbd0:·2020·2020·2020·2020·2020·205b·556e·6974·············[Unit | |||
| 0003bbe0:·5d0a·2020·2020·2020·2020·2020·2020·4265··].············Be | |||
| 0003bbf0:·666f·7265·3d6b·7562·656c·6574·2e73·6572··fore=kubelet.ser | |||
| 0003bc00:·7669·6365·0a20·2020·2020·2020·2020·2020··vice.··········· | |||
| 0003bc10:·205b·5365·7276·6963·655d·0a20·2020·2020···[Service].····· | |||
| 0003bc20:·2020·2020·2020·2054·7970·653d·6f6e·6573·········Type=ones | |||
| 0003bc30:·686f·740a·2020·2020·2020·2020·2020·2020··hot.············ | |||
| 0003bc40:·4578·6563·5374·6172·743d·7570·6461·7465··ExecStart=update | |||
| 0003b | 0003ba90:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | ||
| 0003bc60:·202d·2d73·6574·207b·7b2e·7661·725f·7379···--set·{{.var_sy | |||
| 0003bc70:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003bc80:·6379·7d7d·0a20·2020·2020·2020·2020·2020··cy}}.··········· | |||
| 0003bc90:·2052·656d·6169·6e41·6674·6572·4578·6974···RemainAfterExit | |||
| 0003bca0:·3d79·6573·0a20·2020·2020·2020·2020·2020··=yes.··········· | |||
| 0003bcb0:·205b·496e·7374·616c·6c5d·0a20·2020·2020···[Install].····· | |||
| 0003bcc0:·2020·2020·2020·2057·616e·7465·6442·793d·········WantedBy= | |||
| 0003bcd0:·6d75·6c74·692d·7573·6572·2e74·6172·6765··multi-user.targe | |||
| 0003bce0:·740a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··t.</code></pre>< | |||
| 0003bcf0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bd00:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bd10:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bd20:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bd30:·6574·3d22·2369·646d·3932·3033·2220·7461··et="#idm9203"·ta | |||
| 0003bd40:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bd50:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bd60:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bd70:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bd80:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bd90:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bda0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003bdb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bdc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bdd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bde0:·2269·646d·3932·3033·223e·3c70·7265·3e3c··"idm9203"><pre>< | |||
| 0003bdf0:·636f·6465·3e0a·7661·725f·7379·7374·656d··code>.var_system | |||
| 0003be00:·5f63·7279·7074·6f5f·706f·6c69·6379·3d27··_crypto_policy=' | |||
| 0003be10:·3c61·6262·7220·7469·746c·653d·2266·726f··<abbr·title="fro | |||
| 0003be20:·6d20·5072·6f66·696c·652f·7265·6669·6e65··m·Profile/refine | |||
| 0003be30:·2d76·616c·7565·3a20·7863·6364·665f·6f72··-value:·xccdf_or | |||
| 0003be40:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | |||
| 0003be50:·7465·6e74·5f76·616c·7565·5f76·6172·5f73··tent_value_var_s | |||
| 0003be60:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003be70:·6963·7922·3e44·4546·4155·4c54·3c2f·6162··icy">DEFAULT</ab | |||
| 0003be80:·6272·3e27·0a0a·0a73·7464·6572·725f·6f66··br>'...stderr_of | |||
| 0003be90:·5f63·616c·6c3d·2428·7570·6461·7465·2d63··_call=$(update-c | |||
| 0003bea0:·7279·7074·6f2d·706f·6c69·6369·6573·202d··rypto-policies·- | |||
| 0003b | 0003baa0:·202d·2d73·6574·2024·7b76·6172·5f73·7973···--set·${var_sys | ||
| 0003b | 0003bab0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003b | 0003bac0:·797d·2032·2667·743b·2661·6d70·3b31·2026··y}·2>&1·& | ||
| 0003b | 0003bad0:·6774·3b20·2f64·6576·2f6e·756c·6c29·0a72··gt;·/dev/null).r | ||
| 0003b | 0003bae0:·633d·243f·0a0a·6966·2074·6573·7420·2224··c=$?..if·test·"$ | ||
| 0003bf0 | 0003baf0:·7263·2220·3d20·3132·373b·2074·6865·6e0a··rc"·=·127;·then. | ||
| Max diff block lines reached; 1281488/1299206 bytes (98.64%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Basic | 43 | ··············Linux·9·-·Basic |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 154, 14 lines modified | Offset 154, 33 lines modified | ||
| 154 | ··-·PCI-DSSv4-2.2.7 | 154 | ··-·PCI-DSSv4-2.2.7 |
| 155 | ··-·configure_crypto_policy | 155 | ··-·configure_crypto_policy |
| 156 | ··-·high_severity | 156 | ··-·high_severity |
| 157 | ··-·low_complexity | 157 | ··-·low_complexity |
| 158 | ··-·low_disruption | 158 | ··-·low_disruption |
| 159 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 160 | ··-·restrict_strategy | 160 | ··-·restrict_strategy |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | var_system_crypto_policy='DEFAULT' | ||
| 163 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 164 | rc=$? | ||
| 165 | if·test·"$rc"·=·127;·then | ||
| 166 | » echo·"$stderr_of_call"·>&2 | ||
| 167 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 168 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 169 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 170 | » false··#·end·with·an·error·code | ||
| 171 | elif·test·"$rc"·!=·0;·then | ||
| 172 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 173 | » false··#·end·with·an·error·code | ||
| 174 | fi | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 166 | --- | 180 | --- |
| 167 | apiVersion:·machineconfiguration.openshift.io/v1 | 181 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 179, 33 lines modified | Offset 198, 14 lines modified | ||
| 179 | ············Before=kubelet.service | 198 | ············Before=kubelet.service |
| 180 | ············[Service] | 199 | ············[Service] |
| 181 | ············Type=oneshot | 200 | ············Type=oneshot |
| 182 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 201 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 183 | ············RemainAfterExit=yes | 202 | ············RemainAfterExit=yes |
| 184 | ············[Install] | 203 | ············[Install] |
| 185 | ············WantedBy=multi-user.target | 204 | ············WantedBy=multi-user.target |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | var_system_crypto_policy='DEFAULT' | ||
| 188 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 189 | rc=$? | ||
| 190 | if·test·"$rc"·=·127;·then | ||
| 191 | » echo·"$stderr_of_call"·>&2 | ||
| 192 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 193 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 194 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 195 | » false··#·end·with·an·error·code | ||
| 196 | elif·test·"$rc"·!=·0;·then | ||
| 197 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 198 | » false··#·end·with·an·error·code | ||
| 199 | fi | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 206 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 202 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 207 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 203 | Severity: ···medium | 208 | Severity: ···medium |
| 204 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 209 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 205 | Identifiers:·CCE-83445-7 | 210 | Identifiers:·CCE-83445-7 |
| 206 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 211 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1127, 36 lines modified | Offset 1127, 14 lines modified | ||
| 1127 | ··-·NIST-800-53-AC-8(c) | 1127 | ··-·NIST-800-53-AC-8(c) |
| 1128 | ··-·banner_etc_issue | 1128 | ··-·banner_etc_issue |
| 1129 | ··-·low_complexity | 1129 | ··-·low_complexity |
| 1130 | ··-·medium_disruption | 1130 | ··-·medium_disruption |
| 1131 | ··-·medium_severity | 1131 | ··-·medium_severity |
| 1132 | ··-·no_reboot_needed | 1132 | ··-·no_reboot_needed |
| 1133 | ··-·unknown_strategy | 1133 | ··-·unknown_strategy |
| 1134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1135 | --- | ||
| 1136 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1137 | kind:·MachineConfig | ||
| 1138 | metadata: | ||
| 1139 | ··labels: | ||
| 1140 | ····machineconfiguration.openshift.io/role:·master | ||
| 1141 | ····machineconfiguration.openshift.io/role:·worker | ||
| 1142 | ··name:·75-banner-etc-issue | ||
| 1143 | spec: | ||
| 1144 | ··config: | ||
| 1145 | ····ignition: | ||
| 1146 | ······version:·3.1.0 | ||
| 1147 | ····storage: | ||
| 1148 | ······files: | ||
| 1149 | ······-·contents: | ||
| 1150 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 1151 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 1152 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 1153 | ········mode:·0644 | ||
| 1154 | ········path:·/etc/issue.d/legal-notice | ||
| 1155 | ········overwrite:·true | ||
| 1156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1157 | #·Remediation·is·applicable·only·in·certain·platforms | 1135 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1136 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1159 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' | 1137 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' |
| Offset 1176, 14 lines modified | Offset 1154, 36 lines modified | ||
| 1176 | cat·<<EOF·>/etc/issue | 1154 | cat·<<EOF·>/etc/issue |
| 1177 | $formatted | 1155 | $formatted |
| 1178 | EOF | 1156 | EOF |
| 1179 | else | 1157 | else |
| 1180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| Max diff block lines reached; 88041/95245 bytes (92.44%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00037e60:·3 | 00037e60:·312d·3039·290a·2020·2020·2020·2020·2020··1-09).·········· | ||
| 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15292, 130 lines modified | Offset 15292, 130 lines modified | ||
| 0003bbb0:·6765·743d·2223·6964·6d39·3230·3222·2074··get="#idm9202"·t | 0003bbb0:·6765·743d·2223·6964·6d39·3230·3222·2074··get="#idm9202"·t | ||
| 0003bbc0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbc0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bbd0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bbd0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bbe0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bbe0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bbf0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bbf0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bc00:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bc00:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003bc10:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc10:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc20:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003bc30:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc40:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc50:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bc60:·3d22·6964·6d39·3230·3222·3e3c·7072·653e··="idm9202"><pre> | |||
| 0003bc70:·3c63·6f64·653e·0a76·6172·5f73·7973·7465··<code>.var_syste | |||
| 0003bc80:·6d5f·6372·7970·746f·5f70·6f6c·6963·793d··m_crypto_policy= | |||
| 0003bc90:·273c·6162·6272·2074·6974·6c65·3d22·6672··'<abbr·title="fr | |||
| 0003bca0:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 0003bcb0:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 0003bcc0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 0003bcd0:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 0003bce0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003bcf0:·6c69·6379·223e·4445·4641·554c·543c·2f61··licy">DEFAULT</a | |||
| 0003bd00:·6262·723e·270a·0a0a·7374·6465·7272·5f6f··bbr>'...stderr_o | |||
| 0003bd10:·665f·6361·6c6c·3d24·2875·7064·6174·652d··f_call=$(update- | |||
| 0003bc20:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0003bc30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bc40:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bc50:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bc60:·7365·2220·6964·3d22·6964·6d39·3230·3222··se"·id="idm9202" | |||
| 0003bc70:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bc80:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bc90:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bca0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bcb0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bcc0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bcd0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bce0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bcf0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd00:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bd10:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0003bd20:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bd30:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bd40:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003bd50:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bd60:·7072·653e·3c63·6f64·653e·2d2d·2d0a·6170··pre><code>---.ap | |||
| 0003bd70:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 0003bd80:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 0003bd90:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 0003bda0:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 0003bdb0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 0003bdc0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| 0003bdd0:·0a20·2020·2020·2076·6572·7369·6f6e·3a20··.······version:· | |||
| 0003bde0:·332e·312e·300a·2020·2020·7379·7374·656d··3.1.0.····system | |||
| 0003bdf0:·643a·0a20·2020·2020·2075·6e69·7473·3a0a··d:.······units:. | |||
| 0003be00:·2020·2020·2020·2020·2d20·6e61·6d65·3a20··········-·name:· | |||
| 0003be10:·636f·6e66·6967·7572·652d·6372·7970·746f··configure-crypto | |||
| 0003be20:·2d70·6f6c·6963·792e·7365·7276·6963·650a··-policy.service. | |||
| 0003be30:·2020·2020·2020·2020·2020·656e·6162·6c65············enable | |||
| 0003be40:·643a·2074·7275·650a·2020·2020·2020·2020··d:·true.········ | |||
| 0003be50:·2020·636f·6e74·656e·7473·3a20·7c0a·2020····contents:·|.·· | |||
| 0003be60:·2020·2020·2020·2020·2020·5b55·6e69·745d············[Unit] | |||
| 0003be70:·0a20·2020·2020·2020·2020·2020·2042·6566··.············Bef | |||
| 0003be80:·6f72·653d·6b75·6265·6c65·742e·7365·7276··ore=kubelet.serv | |||
| 0003be90:·6963·650a·2020·2020·2020·2020·2020·2020··ice.············ | |||
| 0003bea0:·5b53·6572·7669·6365·5d0a·2020·2020·2020··[Service].······ | |||
| 0003beb0:·2020·2020·2020·5479·7065·3d6f·6e65·7368········Type=onesh | |||
| 0003bec0:·6f74·0a20·2020·2020·2020·2020·2020·2045··ot.············E | |||
| 0003bed0:·7865·6353·7461·7274·3d75·7064·6174·652d··xecStart=update- | |||
| 0003b | 0003bd20:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | ||
| 0003bef0:·2d2d·7365·7420·7b7b·2e76·6172·5f73·7973··--set·{{.var_sys | |||
| 0003bf00:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003bf10:·797d·7d0a·2020·2020·2020·2020·2020·2020··y}}.············ | |||
| 0003bf20:·5265·6d61·696e·4166·7465·7245·7869·743d··RemainAfterExit= | |||
| 0003bf30:·7965·730a·2020·2020·2020·2020·2020·2020··yes.············ | |||
| 0003bf40:·5b49·6e73·7461·6c6c·5d0a·2020·2020·2020··[Install].······ | |||
| 0003bf50:·2020·2020·2020·5761·6e74·6564·4279·3d6d········WantedBy=m | |||
| 0003bf60:·756c·7469·2d75·7365·722e·7461·7267·6574··ulti-user.target | |||
| 0003bf70:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf80:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf90:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bfa0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bfb0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bfc0:·743d·2223·6964·6d39·3230·3322·2074·6162··t="#idm9203"·tab | |||
| 0003bfd0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bfe0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bff0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c000:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c010:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c020:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003c030:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003c040:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c050:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c060:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c070:·6964·6d39·3230·3322·3e3c·7072·653e·3c63··idm9203"><pre><c | |||
| 0003c080:·6f64·653e·0a76·6172·5f73·7973·7465·6d5f··ode>.var_system_ | |||
| 0003c090:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | |||
| 0003c0a0:·6162·6272·2074·6974·6c65·3d22·6672·6f6d··abbr·title="from | |||
| 0003c0b0:·2050·726f·6669·6c65·2f72·6566·696e·652d···Profile/refine- | |||
| 0003c0c0:·7661·6c75·653a·2078·6363·6466·5f6f·7267··value:·xccdf_org | |||
| 0003c0d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | |||
| 0003c0e0:·656e·745f·7661·6c75·655f·7661·725f·7379··ent_value_var_sy | |||
| 0003c0f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003c100:·6379·223e·4445·4641·554c·543c·2f61·6262··cy">DEFAULT</abb | |||
| 0003c110:·723e·270a·0a0a·7374·6465·7272·5f6f·665f··r>'...stderr_of_ | |||
| 0003c120:·6361·6c6c·3d24·2875·7064·6174·652d·6372··call=$(update-cr | |||
| 0003c130:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003 | 0003bd30:·2d2d·7365·7420·247b·7661·725f·7379·7374··--set·${var_syst | ||
| 0003 | 0003bd40:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003 | 0003bd50:·7d20·3226·6774·3b26·616d·703b·3120·2667··}·2>&1·&g | ||
| 0003 | 0003bd60:·743b·202f·6465·762f·6e75·6c6c·290a·7263··t;·/dev/null).rc | ||
| 0003 | 0003bd70:·3d24·3f0a·0a69·6620·7465·7374·2022·2472··=$?..if·test·"$r | ||
| Max diff block lines reached; 1621746/1639602 bytes (98.91%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Intermediate | 43 | ··············Linux·9·-·Intermediate |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 162, 14 lines modified | Offset 162, 33 lines modified | ||
| 162 | ··-·PCI-DSSv4-2.2.7 | 162 | ··-·PCI-DSSv4-2.2.7 |
| 163 | ··-·configure_crypto_policy | 163 | ··-·configure_crypto_policy |
| 164 | ··-·high_severity | 164 | ··-·high_severity |
| 165 | ··-·low_complexity | 165 | ··-·low_complexity |
| 166 | ··-·low_disruption | 166 | ··-·low_disruption |
| 167 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 168 | ··-·restrict_strategy | 168 | ··-·restrict_strategy |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | var_system_crypto_policy='DEFAULT' | ||
| 171 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 172 | rc=$? | ||
| 173 | if·test·"$rc"·=·127;·then | ||
| 174 | » echo·"$stderr_of_call"·>&2 | ||
| 175 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 176 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 177 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 178 | » false··#·end·with·an·error·code | ||
| 179 | elif·test·"$rc"·!=·0;·then | ||
| 180 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 181 | » false··#·end·with·an·error·code | ||
| 182 | fi | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 174 | --- | 188 | --- |
| 175 | apiVersion:·machineconfiguration.openshift.io/v1 | 189 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 187, 33 lines modified | Offset 206, 14 lines modified | ||
| 187 | ············Before=kubelet.service | 206 | ············Before=kubelet.service |
| 188 | ············[Service] | 207 | ············[Service] |
| 189 | ············Type=oneshot | 208 | ············Type=oneshot |
| 190 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 209 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 191 | ············RemainAfterExit=yes | 210 | ············RemainAfterExit=yes |
| 192 | ············[Install] | 211 | ············[Install] |
| 193 | ············WantedBy=multi-user.target | 212 | ············WantedBy=multi-user.target |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | var_system_crypto_policy='DEFAULT' | ||
| 196 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 197 | rc=$? | ||
| 198 | if·test·"$rc"·=·127;·then | ||
| 199 | » echo·"$stderr_of_call"·>&2 | ||
| 200 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 201 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 202 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 203 | » false··#·end·with·an·error·code | ||
| 204 | elif·test·"$rc"·!=·0;·then | ||
| 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 211 | Severity: ···medium | 216 | Severity: ···medium |
| 212 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 213 | Identifiers:·CCE-83445-7 | 218 | Identifiers:·CCE-83445-7 |
| 214 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 219 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 2212, 36 lines modified | Offset 2212, 14 lines modified | ||
| 2212 | ··-·NIST-800-53-AC-8(c) | 2212 | ··-·NIST-800-53-AC-8(c) |
| 2213 | ··-·banner_etc_issue | 2213 | ··-·banner_etc_issue |
| 2214 | ··-·low_complexity | 2214 | ··-·low_complexity |
| 2215 | ··-·medium_disruption | 2215 | ··-·medium_disruption |
| 2216 | ··-·medium_severity | 2216 | ··-·medium_severity |
| 2217 | ··-·no_reboot_needed | 2217 | ··-·no_reboot_needed |
| 2218 | ··-·unknown_strategy | 2218 | ··-·unknown_strategy |
| 2219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2220 | --- | ||
| 2221 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2222 | kind:·MachineConfig | ||
| 2223 | metadata: | ||
| 2224 | ··labels: | ||
| 2225 | ····machineconfiguration.openshift.io/role:·master | ||
| 2226 | ····machineconfiguration.openshift.io/role:·worker | ||
| 2227 | ··name:·75-banner-etc-issue | ||
| 2228 | spec: | ||
| 2229 | ··config: | ||
| 2230 | ····ignition: | ||
| 2231 | ······version:·3.1.0 | ||
| 2232 | ····storage: | ||
| 2233 | ······files: | ||
| 2234 | ······-·contents: | ||
| 2235 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 2236 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 2237 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 2238 | ········mode:·0644 | ||
| 2239 | ········path:·/etc/issue.d/legal-notice | ||
| 2240 | ········overwrite:·true | ||
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2242 | #·Remediation·is·applicable·only·in·certain·platforms | 2220 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2243 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2221 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 2244 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' | 2222 | login_banner_text='^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$' |
| Offset 2261, 14 lines modified | Offset 2239, 36 lines modified | ||
| 2261 | cat·<<EOF·>/etc/issue | 2239 | cat·<<EOF·>/etc/issue |
| 2262 | $formatted | 2240 | $formatted |
| 2263 | EOF | 2241 | EOF |
| 2264 | else | 2242 | else |
| 2265 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2243 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| Max diff block lines reached; 131040/138258 bytes (94.78%) of diff not shown. | |||
| Offset 14299, 15 lines modified | Offset 14299, 15 lines modified | ||
| 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e10:·6620·3230·323 | 00037e10:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15158, 237 lines modified | Offset 15158, 237 lines modified | ||
| 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b3c0:·656d·6564·6961·7469·6f6e·204 | 0003b3c0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b3d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b3e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b400:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b410:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b3d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b3e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b3f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b400:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b410:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b420:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b430:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b440:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b450:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b460:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b470:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b480:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b490:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b4a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b4b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b4c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b4d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b4e0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b4f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b500:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b510:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b520:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b530:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b540:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b550:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b560:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b570:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b580:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b590:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b5a0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b5b0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b5c0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b5d0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b5e0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b5f0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b600:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b610:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b620:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b630:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b640:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b650:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b660:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b670:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b680:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b690:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b6a0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b6b0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b6c0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b6d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b700:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b710:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | |||
| 0003b720:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b730:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b740:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b750:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b760:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b770:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b780:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b790:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b7a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b7b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b7c0:·3430·3722·3e3c·7461·626c·6520·636c·6173··407"><table·clas | |||
| 0003b7d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b7e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b7f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b800:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b810:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b820:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b830:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b840:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b850:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b860:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b870:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b880:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b890:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b8a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b420:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b430:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b440:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b450:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b8c0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003b8d0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b8e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b8f0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b900:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b910:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b920:·6765·743d·2223·6964·6d38·3430·3822·2074··get="#idm8408"·t | |||
| 0003b930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b990:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b9a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b9b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| Max diff block lines reached; 5479655/5512139 bytes (99.41%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 112 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 112 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 114 | ·············_\x8c_\x8i_\x8s············6.1.1 | 114 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·install·aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 124 | ··package: | 140 | ··package: |
| Offset 134, 26 lines modified | Offset 153, 14 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 155 | ··-·low_complexity |
| 137 | ··-·low_disruption | 156 | ··-·low_disruption |
| 138 | ··-·medium_severity | 157 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·install·aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 165 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 173, 21 lines modified | Offset 180, 14 lines modified | ||
| 173 | include·install_aide | 180 | include·install_aide |
| 174 | class·install_aide·{ | 181 | class·install_aide·{ |
| 175 | ··package·{·'aide': | 182 | ··package·{·'aide': |
| 176 | ····ensure·=>·'installed', | 183 | ····ensure·=>·'installed', |
| 177 | ··} | 184 | ··} |
| 178 | } | 185 | } |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·--add=aide | ||
| 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 186 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 186 | Run·the·following·command·to·generate·a·new·database: | 187 | Run·the·following·command·to·generate·a·new·database: |
| 187 | $·sudo·/usr/sbin/aide·--init | 188 | $·sudo·/usr/sbin/aide·--init |
| 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 189 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 189 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 190 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 190 | To·initiate·a·manual·check,·run·the·following·command: | 191 | To·initiate·a·manual·check,·run·the·following·command: |
| 191 | $·sudo·/usr/sbin/aide·--check | 192 | $·sudo·/usr/sbin/aide·--check |
| Offset 738, 14 lines modified | Offset 738, 33 lines modified | ||
| 738 | ··-·PCI-DSSv4-2.2.7 | 738 | ··-·PCI-DSSv4-2.2.7 |
| 739 | ··-·configure_crypto_policy | 739 | ··-·configure_crypto_policy |
| 740 | ··-·high_severity | 740 | ··-·high_severity |
| 741 | ··-·low_complexity | 741 | ··-·low_complexity |
| 742 | ··-·low_disruption | 742 | ··-·low_disruption |
| 743 | ··-·no_reboot_needed | 743 | ··-·no_reboot_needed |
| 744 | ··-·restrict_strategy | 744 | ··-·restrict_strategy |
| 745 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 746 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 747 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 748 | rc=$? | ||
| 749 | if·test·"$rc"·=·127;·then | ||
| 750 | » echo·"$stderr_of_call"·>&2 | ||
| 751 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 752 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 753 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 754 | » false··#·end·with·an·error·code | ||
| 755 | elif·test·"$rc"·!=·0;·then | ||
| 756 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 757 | » false··#·end·with·an·error·code | ||
| 758 | fi | ||
| 745 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 746 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 418048/423691 bytes (98.67%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e10:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e20:·2d31·3 | 00037e20:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15127, 236 lines modified | Offset 15127, 236 lines modified | ||
| 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | ||
| 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b1e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b1f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b200:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b210:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b220:·6964·3d22·6964·6d38·3430·3622·3e3c·7072··id="idm8406"><pr | |||
| 0003b1d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b220:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b250:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b270:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b280:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b290:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b2c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b310:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b320:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b330:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b340:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b350:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b360:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b370:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b380:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b390:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b3a0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b3b0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b3c0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b3d0:·202d·2043·4345·2d39·3038·3433·2d34·0a20···-·CCE-90843-4.· | |||
| 0003b3e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b3f0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b400:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b410:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b420:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b430:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b440:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b450:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b460:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b470:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b480:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b490:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b4a0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b4b0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b4c0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b4d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b4e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b4f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b500:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b510:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b520:·2369·646d·3834·3037·2220·7461·6269·6e64··#idm8407"·tabind | |||
| 0003b530:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b540:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b550:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b560:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b570:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b580:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b590:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b5a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b5b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5c0:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b5d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b5e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b5f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b600:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b610:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b620:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b630:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b640:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b650:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b660:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b670:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b680:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b690:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b6b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b | 0003b230:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 0003b240:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b250:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b6d0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b6e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b6f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b700:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b710:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b720:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b730:·2369·646d·3834·3038·2220·7461·6269·6e64··#idm8408"·tabind | |||
| 0003b740:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b750:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b760:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b770:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b780:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b790:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b7a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b7b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| Max diff block lines reached; 3495073/3527557 bytes (99.08%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 14 lines modified | Offset 106, 33 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·install·aide | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 119 | ··package: | 135 | ··package: |
| Offset 129, 26 lines modified | Offset 148, 14 lines modified | ||
| 129 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 130 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 131 | ··-·low_complexity | 150 | ··-·low_complexity |
| 132 | ··-·low_disruption | 151 | ··-·low_disruption |
| 133 | ··-·medium_severity | 152 | ··-·medium_severity |
| 134 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 135 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | 160 | #·Remediation·is·applicable·only·in·certain·platforms |
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 168, 21 lines modified | Offset 175, 14 lines modified | ||
| 168 | include·install_aide | 175 | include·install_aide |
| 169 | class·install_aide·{ | 176 | class·install_aide·{ |
| 170 | ··package·{·'aide': | 177 | ··package·{·'aide': |
| 171 | ····ensure·=>·'installed', | 178 | ····ensure·=>·'installed', |
| 172 | ··} | 179 | ··} |
| 173 | } | 180 | } |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=aide | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 185 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 185 | To·initiate·a·manual·check,·run·the·following·command: | 186 | To·initiate·a·manual·check,·run·the·following·command: |
| 186 | $·sudo·/usr/sbin/aide·--check | 187 | $·sudo·/usr/sbin/aide·--check |
| Offset 733, 14 lines modified | Offset 733, 33 lines modified | ||
| 733 | ··-·PCI-DSSv4-2.2.7 | 733 | ··-·PCI-DSSv4-2.2.7 |
| 734 | ··-·configure_crypto_policy | 734 | ··-·configure_crypto_policy |
| 735 | ··-·high_severity | 735 | ··-·high_severity |
| 736 | ··-·low_complexity | 736 | ··-·low_complexity |
| 737 | ··-·low_disruption | 737 | ··-·low_disruption |
| 738 | ··-·no_reboot_needed | 738 | ··-·no_reboot_needed |
| 739 | ··-·restrict_strategy | 739 | ··-·restrict_strategy |
| 740 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 741 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 742 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 743 | rc=$? | ||
| 744 | if·test·"$rc"·=·127;·then | ||
| 745 | » echo·"$stderr_of_call"·>&2 | ||
| 746 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 747 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 748 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 749 | » false··#·end·with·an·error·code | ||
| 750 | elif·test·"$rc"·!=·0;·then | ||
| 751 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 752 | » false··#·end·with·an·error·code | ||
| 753 | fi | ||
| 740 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 741 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 755 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 294493/300146 bytes (98.12%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15118, 237 lines modified | Offset 15118, 237 lines modified | ||
| 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b140:·5265·6d65·6469·6174·696f·6e20·4 | 0003b140:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b150:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b160:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b170:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b180:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b190:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b150:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b190:·6964·6d38·3430·3622·3e3c·7461·626c·6520··idm8406"><table· | |||
| 0003b1a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b1f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b200:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b210:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b220:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b230:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b240:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b250:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b260:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b270:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b280:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b290:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b2a0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b2b0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b2c0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b2d0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b2e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b2f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b300:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b310:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b320:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b330:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b340:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 0003b350:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 0003b360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b370:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b380:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b3e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b3f0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b400:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b410:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b420:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b430:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b440:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b450:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b460:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b470:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b480:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b490:·7267·6574·3d22·2369·646d·3834·3037·2220··rget="#idm8407"· | |||
| 0003b4a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b4b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b4c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b4d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b4e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b4f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b500:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b510:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b520:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b530:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b540:·3834·3037·223e·3c74·6162·6c65·2063·6c61··8407"><table·cla | |||
| 0003b550:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b560:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b570:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b580:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b590:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b5a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b5b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b5c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b5d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b5e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b5f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b600:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b610:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b620:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b1a0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | ||
| 0003b1b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b1c0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b1d0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b640:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 0003b650:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003b660:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b670:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b680:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b690:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b6a0:·7267·6574·3d22·2369·646d·3834·3038·2220··rget="#idm8408"· | |||
| 0003b6b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b6c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b6d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b6e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b6f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b700:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b710:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b720:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b730:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| Max diff block lines reached; 3230207/3262691 bytes (99.00%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 33 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 118 | ··package: | 134 | ··package: |
| Offset 128, 26 lines modified | Offset 147, 14 lines modified | ||
| 128 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 129 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 130 | ··-·low_complexity | 149 | ··-·low_complexity |
| 131 | ··-·low_disruption | 150 | ··-·low_disruption |
| 132 | ··-·medium_severity | 151 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 134 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 174, 14 lines modified | ||
| 167 | include·install_aide | 174 | include·install_aide |
| 168 | class·install_aide·{ | 175 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 176 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 177 | ····ensure·=>·'installed', |
| 171 | ··} | 178 | ··} |
| 172 | } | 179 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 184 | To·initiate·a·manual·check,·run·the·following·command: | 185 | To·initiate·a·manual·check,·run·the·following·command: |
| 185 | $·sudo·/usr/sbin/aide·--check | 186 | $·sudo·/usr/sbin/aide·--check |
| Offset 732, 14 lines modified | Offset 732, 33 lines modified | ||
| 732 | ··-·PCI-DSSv4-2.2.7 | 732 | ··-·PCI-DSSv4-2.2.7 |
| 733 | ··-·configure_crypto_policy | 733 | ··-·configure_crypto_policy |
| 734 | ··-·high_severity | 734 | ··-·high_severity |
| 735 | ··-·low_complexity | 735 | ··-·low_complexity |
| 736 | ··-·low_disruption | 736 | ··-·low_disruption |
| 737 | ··-·no_reboot_needed | 737 | ··-·no_reboot_needed |
| 738 | ··-·restrict_strategy | 738 | ··-·restrict_strategy |
| 739 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 740 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 741 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 742 | rc=$? | ||
| 743 | if·test·"$rc"·=·127;·then | ||
| 744 | » echo·"$stderr_of_call"·>&2 | ||
| 745 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 746 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 747 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 748 | » false··#·end·with·an·error·code | ||
| 749 | elif·test·"$rc"·!=·0;·then | ||
| 750 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 751 | » false··#·end·with·an·error·code | ||
| 752 | fi | ||
| 739 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 753 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 740 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 754 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 271696/277285 bytes (97.98%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15150, 236 lines modified | Offset 15150, 236 lines modified | ||
| 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b340:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b350:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b360:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b370:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b380:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b390:·643d·2269·646d·3834·3036·223e·3c70·7265··d="idm8406"><pre | |||
| 0003b340:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b350:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b360:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b370:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b380:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b390:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b3a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b3b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b3c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b3d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b3e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b3f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b400:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b410:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b420:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b430:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b440:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b450:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b460:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b470:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b480:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b490:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b4a0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b4b0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b4c0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b4d0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b4e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b4f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b500:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b510:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b520:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b530:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b540:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b550:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b560:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b570:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b580:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b590:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b5a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b5b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b5c0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b5d0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b5e0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b600:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b610:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b620:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b630:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b640:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b650:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b660:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b670:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b690:·6964·6d38·3430·3722·2074·6162·696e·6465··idm8407"·tabinde | |||
| 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6f0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003b700:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b710:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b720:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b730:·2220·6964·3d22·6964·6d38·3430·3722·3e3c··"·id="idm8407">< | |||
| 0003b740:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b750:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b760:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b770:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b780:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b790:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b7a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b7b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b7c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b7d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b7e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b7f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b800:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b810:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b820:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b | 0003b3a0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003b3b0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b3c0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b840:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003b850:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b860:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b870:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b880:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b890:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b8a0:·6964·6d38·3430·3822·2074·6162·696e·6465··idm8408"·tabinde | |||
| 0003b8b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b8c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b8d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b8e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b8f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b900:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b910:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b920:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b930:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| Max diff block lines reached; 5339812/5372158 bytes (99.40%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 110, 14 lines modified | Offset 110, 33 lines modified | ||
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ·············_\x8c_\x8i_\x8s············6.1.1 | 113 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | [[packages]] | ||
| 119 | name·=·"aide" | ||
| 120 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package·--add=aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·install·aide | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 122 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 123 | ··package: | 139 | ··package: |
| Offset 133, 26 lines modified | Offset 152, 14 lines modified | ||
| 133 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 134 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 135 | ··-·low_complexity | 154 | ··-·low_complexity |
| 136 | ··-·low_disruption | 155 | ··-·low_disruption |
| 137 | ··-·medium_severity | 156 | ··-·medium_severity |
| 138 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 139 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·install·aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | 164 | #·Remediation·is·applicable·only·in·certain·platforms |
| 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 172, 21 lines modified | Offset 179, 14 lines modified | ||
| 172 | include·install_aide | 179 | include·install_aide |
| 173 | class·install_aide·{ | 180 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 181 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 182 | ····ensure·=>·'installed', |
| 176 | ··} | 183 | ··} |
| 177 | } | 184 | } |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·--add=aide | ||
| 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 185 | Run·the·following·command·to·generate·a·new·database: | 186 | Run·the·following·command·to·generate·a·new·database: |
| 186 | $·sudo·/usr/sbin/aide·--init | 187 | $·sudo·/usr/sbin/aide·--init |
| 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 188 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 189 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 189 | To·initiate·a·manual·check,·run·the·following·command: | 190 | To·initiate·a·manual·check,·run·the·following·command: |
| 190 | $·sudo·/usr/sbin/aide·--check | 191 | $·sudo·/usr/sbin/aide·--check |
| Offset 737, 14 lines modified | Offset 737, 33 lines modified | ||
| 737 | ··-·PCI-DSSv4-2.2.7 | 737 | ··-·PCI-DSSv4-2.2.7 |
| 738 | ··-·configure_crypto_policy | 738 | ··-·configure_crypto_policy |
| 739 | ··-·high_severity | 739 | ··-·high_severity |
| 740 | ··-·low_complexity | 740 | ··-·low_complexity |
| 741 | ··-·low_disruption | 741 | ··-·low_disruption |
| 742 | ··-·no_reboot_needed | 742 | ··-·no_reboot_needed |
| 743 | ··-·restrict_strategy | 743 | ··-·restrict_strategy |
| 744 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 745 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 746 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 747 | rc=$? | ||
| 748 | if·test·"$rc"·=·127;·then | ||
| 749 | » echo·"$stderr_of_call"·>&2 | ||
| 750 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 751 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 752 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 753 | » false··#·end·with·an·error·code | ||
| 754 | elif·test·"$rc"·!=·0;·then | ||
| 755 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 756 | » false··#·end·with·an·error·code | ||
| 757 | fi | ||
| 744 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 758 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 745 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 759 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 403917/409506 bytes (98.64%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038050:·206f·6620·3230·323 | 00038050:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15614, 267 lines modified | Offset 15614, 267 lines modified | ||
| 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003cfe0:·2369·646d·3839·3836·2220·7461·6269·6e64··#idm8986"·tabind | 0003cfe0:·2369·646d·3839·3836·2220·7461·6269·6e64··#idm8986"·tabind | ||
| 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003d040:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003d050:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003d060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003d070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003d080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003d090:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | |||
| 0003d0a0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 0003d0b0:·6375·7374·6f6d·697a·6174·696f·6e73·5d0a··customizations]. | |||
| 0003d0c0:·6669·7073·203d·2074·7275·650a·3c2f·636f··fips·=·true.</co | |||
| 0003d0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d120:·646d·3839·3837·2220·7461·6269·6e64·6578··dm8987"·tabindex | |||
| 0003d130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d | 0003d180:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003d | 0003d190:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003d | 0003d1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003d | 0003d1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003d | 0003d1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003d | 0003d1d0:·6d38·3938·3722·3e3c·7461·626c·6520·636c··m8987"><table·cl | ||
| 0003d | 0003d1e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003d | 0003d1f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003d | 0003d200:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003d | 0003d210:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003d | 0003d220:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003d | 0003d230:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003d240:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003d250:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003d260:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0003d270:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003d280:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003d | 0003d290:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003d110:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d120:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0003d130:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003d140:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003d150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d | 0003d2a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003d | 0003d2b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003d | 0003d2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003d | 0003d2d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003d | 0003d2e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003d | 0003d2f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003d | 0003d300:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003d | 0003d310:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003d | 0003d320:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003d | 0003d330:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003d | 0003d340:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | ||
| 0003d | 0003d350:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 0003d | 0003d360:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 0003d | 0003d370:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 0003d | 0003d380:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 0003d | 0003d390:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | ||
| 0003d | 0003d3a0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | ||
| 0003d | 0003d3b0:·5053·3c2f·6162·6272·3e0a·2020·7461·6773··PS</abbr>.··tags | ||
| 0003d | 0003d3c0:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | ||
| 0003d | 0003d3d0:·2d20·6e61·6d65·3a20·456e·6162·6c65·2046··-·name:·Enable·F | ||
| 0003d | 0003d3e0:·4950·5320·4d6f·6465·202d·2043·6865·636b··IPS·Mode·-·Check | ||
| 0003d | 0003d3f0:·2074·6f20·5365·6520·7468·6520·4375·7272···to·See·the·Curr | ||
| 0003d | 0003d400:·656e·7420·5374·6174·7573·206f·6620·4649··ent·Status·of·FI | ||
| 0003d | 0003d410:·5053·204d·6f64·650a·2020·616e·7369·626c··PS·Mode.··ansibl | ||
| 0003d | 0003d420:·652e·6275·696c·7469·6e2e·636f·6d6d·616e··e.builtin.comman | ||
| 0003d | 0003d430:·643a·202f·7573·722f·6269·6e2f·6669·7073··d:·/usr/bin/fips | ||
| 0003d | 0003d440:·2d6d·6f64·652d·7365·7475·7020·2d2d·6368··-mode-setup·--ch | ||
| 0003d | 0003d450:·6563·6b0a·2020·7265·6769·7374·6572·3a20··eck.··register:· | ||
| 0003d | 0003d460:·6973·5f66·6970·735f·656e·6162·6c65·640a··is_fips_enabled. | ||
| 0003d | 0003d470:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | ||
| 0003d | 0003d480:·616c·7365·0a20·2063·6861·6e67·6564·5f77··alse.··changed_w | ||
| 0003d | 0003d490:·6865·6e3a·2066·616c·7365·0a20·2077·6865··hen:·false.··whe | ||
| 0003d | 0003d4a0:·6e3a·0a20·202d·2028·2061·6e73·6962·6c65··n:.··-·(·ansible | ||
| 0003d | 0003d4b0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 0003d | 0003d4c0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 0003d | 0003d4d0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 0003d | 0003d4e0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 0003d | 0003d4f0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 0003d | 0003d500:·2020·2061·6e64·206e·6f74·2028·206c·6f6f·····and·not·(·loo | ||
| 0003d | 0003d510:·6b75·7028·2265·6e76·222c·2022·636f·6e74··kup("env",·"cont | ||
| 0003d | 0003d520:·6169·6e65·7222·2920·3d3d·2022·6277·7261··ainer")·==·"bwra | ||
| 0003d | 0003d530:·702d·6f73·6275·696c·6422·2029·2029·0a20··p-osbuild"·)·).· | ||
| 0003d | 0003d540:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 0003d | 0003d550:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 0003d | 0003d560:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 0003d | 0003d570:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 0003d | 0003d580:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 0003d | 0003d590:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 0003d | 0003d5a0:·0a20·202d·2043·4345·2d38·3837·3432·2d32··.··-·CCE-88742-2 | ||
| 0003d | 0003d5b0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | ||
| 0003d | 0003d5c0:·4845·4c2d·3039·2d36·3731·3031·300a·2020··HEL-09-671010.·· | ||
| 0003d | 0003d5d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003d | 0003d5e0:·2d33·2836·290a·2020·2d20·4e49·5354·2d38··-3(6).··-·NIST-8 | ||
| 0003d | 0003d5f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | ||
| 0003d | 0003d600:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | ||
| 0003d | 0003d610:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003d | 0003d620:·3533·2d53·432d·3132·0a20·202d·204e·4953··53-SC-12.··-·NIS | ||
| 0003d630:·542d·3830·302d·3533·2d53·432d·3132·2832··T-800-53-SC-12(2 | |||
| 0003d640:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003d650:·332d·5343·2d31·3228·3329·0a20·202d·204e··3-SC-12(3).··-·N | |||
| 0003d | 0003d660:·4953·542d·3830·302d·3533·2d53·432d·3133··IST-800-53-SC-13 | ||
| Max diff block lines reached; 2648998/2685622 bytes (98.64%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:9 | 54 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 208, 14 lines modified | Offset 208, 18 lines modified | ||
| 208 | ·············_\x8i_\x8s_\x8m······1446 | 208 | ·············_\x8i_\x8s_\x8m······1446 |
| 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 216 | [customizations] | ||
| 217 | fips·=·true | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 223 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 221 | ··set_fact: | 224 | ··set_fact: |
| Offset 319, 18 lines modified | Offset 323, 14 lines modified | ||
| 319 | ··-·NIST-800-53-SC-13 | 323 | ··-·NIST-800-53-SC-13 |
| 320 | ··-·enable_fips_mode | 324 | ··-·enable_fips_mode |
| 321 | ··-·high_severity | 325 | ··-·high_severity |
| 322 | ··-·medium_complexity | 326 | ··-·medium_complexity |
| 323 | ··-·medium_disruption | 327 | ··-·medium_disruption |
| 324 | ··-·reboot_required | 328 | ··-·reboot_required |
| 325 | ··-·restrict_strategy | 329 | ··-·restrict_strategy |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 327 | [customizations] | ||
| 328 | fips·=·true | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | 331 | #·Remediation·is·applicable·only·in·certain·platforms |
| 331 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 332 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 332 | var_system_crypto_policy='FIPS' | 333 | var_system_crypto_policy='FIPS' |
| Offset 371, 14 lines modified | Offset 371, 33 lines modified | ||
| 371 | Severity: ···medium | 371 | Severity: ···medium |
| 372 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 372 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 373 | Identifiers:·CCE-83442-4 | 373 | Identifiers:·CCE-83442-4 |
| 374 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 374 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 375 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 375 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 376 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 | 376 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 |
| 377 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 377 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 379 | [[packages]] | ||
| 380 | name·=·"crypto-policies" | ||
| 381 | version·=·"*" | ||
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 387 | package·--add=crypto-policies | ||
| 388 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 389 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 390 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 391 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 392 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 393 | package·install·crypto-policies | ||
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 383 | -·name:·Ensure·crypto-policies·is·installed | 399 | -·name:·Ensure·crypto-policies·is·installed |
| 384 | ··package: | 400 | ··package: |
| Offset 389, 26 lines modified | Offset 408, 14 lines modified | ||
| 389 | ··-·DISA-STIG-RHEL-09-672010 | 408 | ··-·DISA-STIG-RHEL-09-672010 |
| 390 | ··-·enable_strategy | 409 | ··-·enable_strategy |
| 391 | ··-·low_complexity | 410 | ··-·low_complexity |
| 392 | ··-·low_disruption | 411 | ··-·low_disruption |
| 393 | ··-·medium_severity | 412 | ··-·medium_severity |
| 394 | ··-·no_reboot_needed | 413 | ··-·no_reboot_needed |
| 395 | ··-·package_crypto-policies_installed | 414 | ··-·package_crypto-policies_installed |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 397 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 398 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 399 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 400 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 401 | package·install·crypto-policies | ||
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 403 | [[packages]] | ||
| 404 | name·=·"crypto-policies" | ||
| 405 | version·=·"*" | ||
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 411 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 420 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 422, 21 lines modified | Offset 429, 14 lines modified | ||
| 422 | include·install_crypto-policies | 429 | include·install_crypto-policies |
| 423 | class·install_crypto-policies·{ | 430 | class·install_crypto-policies·{ |
| 424 | ··package·{·'crypto-policies': | 431 | ··package·{·'crypto-policies': |
| 425 | ····ensure·=>·'installed', | 432 | ····ensure·=>·'installed', |
| 426 | ··} | 433 | ··} |
| 427 | } | 434 | } |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 356703/362608 bytes (98.37%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e30:·3032·3 | 00037e30:·3032·342d·3131·2d30·3929·0a20·2020·2020··024-11-09).····· | ||
| 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 17455, 130 lines modified | Offset 17455, 130 lines modified | ||
| 000442e0:·6574·3d22·2369·646d·3932·3032·2220·7461··et="#idm9202"·ta | 000442e0:·6574·3d22·2369·646d·3932·3032·2220·7461··et="#idm9202"·ta | ||
| 000442f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000442f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00044300:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00044300:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00044310:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00044310:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00044320:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00044320:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00044330:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00044330:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00044340:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00044340:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00044350:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 00044360:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00044370:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00044380:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00044390:·6522·2069·643d·2269·646d·3932·3032·223e··e"·id="idm9202"> | |||
| 000443a0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000443b0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000443c0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000443d0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000443e0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000443f0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00044400:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00044410:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00044 | 00044350:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 00044360:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00044370:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00044380:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00044390:·2269·646d·3932·3032·223e·3c70·7265·3e3c··"idm9202"><pre>< | |||
| 000443a0:·636f·6465·3e0a·7661·725f·7379·7374·656d··code>.var_system | |||
| 000443b0:·5f63·7279·7074·6f5f·706f·6c69·6379·3d27··_crypto_policy=' | |||
| 000443c0:·3c61·6262·7220·7469·746c·653d·2266·726f··<abbr·title="fro | |||
| 000443d0:·6d20·5072·6f66·696c·652f·7265·6669·6e65··m·Profile/refine | |||
| 000443e0:·2d76·616c·7565·3a20·7863·6364·665f·6f72··-value:·xccdf_or | |||
| 000443f0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | |||
| 00044400:·7465·6e74·5f76·616c·7565·5f76·6172·5f73··tent_value_var_s | |||
| 00044410:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 00044420:·6963·7922·3e44·4546·4155·4c54·3a4e·4f2d··icy">DEFAULT:NO- | |||
| 00044430:·5348·4131·3c2f·6162·6272·3e27·0a0a·0a73··SHA1</abbr>'...s | |||
| 00044440:·7464·6572·725f·6f66·5f63·616c·6c3d·2428··tderr_of_call=$( | |||
| 00044450:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 00044460:·6c69·6369·6573·202d·2d73·6574·2024·7b76··licies·--set·${v | |||
| 00044470:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 00044480:·5f70·6f6c·6963·797d·2032·2667·743b·2661··_policy}·2>&a | |||
| 00044490:·6d70·3b31·2026·6774·3b20·2f64·6576·2f6e··mp;1·>·/dev/n | |||
| 000444a0:·756c·6c29·0a72·633d·243f·0a0a·6966·2074··ull).rc=$?..if·t | |||
| 000444b0:·6573·7420·2224·7263·2220·3d20·3132·373b··est·"$rc"·=·127; | |||
| 000444c0:·2074·6865·6e0a·0965·6368·6f20·2224·7374···then..echo·"$st | |||
| 000444d0:·6465·7272·5f6f·665f·6361·6c6c·2220·2667··derr_of_call"·&g | |||
| 000444e0:·743b·2661·6d70·3b32·0a09·6563·686f·2022··t;&2..echo·" | |||
| 000444f0:·4d61·6b65·2073·7572·6520·7468·6174·2074··Make·sure·that·t | |||
| 00044500:·6865·2073·6372·6970·7420·6973·2069·6e73··he·script·is·ins | |||
| 00044510:·7461·6c6c·6564·206f·6e20·7468·6520·7265··talled·on·the·re | |||
| 00044520:·6d65·6469·6174·6564·2073·7973·7465·6d2e··mediated·system. | |||
| 00044530:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 00044540:·686f·2022·5365·6520·6f75·7470·7574·206f··ho·"See·output·o | |||
| 00044550:·6620·7468·6520·2764·6e66·2070·726f·7669··f·the·'dnf·provi | |||
| 00044560:·6465·7320·7570·6461·7465·2d63·7279·7074··des·update-crypt | |||
| 00044570:·6f2d·706f·6c69·6369·6573·2720·636f·6d6d··o-policies'·comm | |||
| 00044580:·616e·6422·2026·6774·3b26·616d·703b·320a··and"·>&2. | |||
| 00044590:·0965·6368·6f20·2274·6f20·7365·6520·7768··.echo·"to·see·wh | |||
| 000445a0:·6174·2070·6163·6b61·6765·2074·6f20·2872··at·package·to·(r | |||
| 000445b0:·6529·696e·7374·616c·6c22·2026·6774·3b26··e)install"·>& | |||
| 000445c0:·616d·703b·320a·0a09·6661·6c73·6520·2023··amp;2...false··# | |||
| 000445d0:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 000445e0:·6f72·2063·6f64·650a·656c·6966·2074·6573··or·code.elif·tes | |||
| 000445f0:·7420·2224·7263·2220·213d·2030·3b20·7468··t·"$rc"·!=·0;·th | |||
| 00044600:·656e·0a09·6563·686f·2022·4572·726f·7220··en..echo·"Error· | |||
| 00044610:·696e·766f·6b69·6e67·2074·6865·2075·7064··invoking·the·upd | |||
| 00044620:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 00044630:·6965·7320·7363·7269·7074·3a20·2473·7464··ies·script:·$std | |||
| 00044640:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 00044650:·3b26·616d·703b·320a·0966·616c·7365·2020··;&2..false·· | |||
| 00044660:·2320·656e·6420·7769·7468·2061·6e20·6572··#·end·with·an·er | |||
| 00044670:·726f·7220·636f·6465·0a66·690a·3c2f·636f··ror·code.fi.</co | |||
| 00044680:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00044690:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000446a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 000446b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 000446c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 000446d0:·646d·3932·3034·2220·7461·6269·6e64·6578··dm9204"·tabindex | |||
| 000446e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 000446f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00044700:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00044710:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00044720:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00044730:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 00044740:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 00044750:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00044760:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00044770:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00044780:·2269·646d·3932·3034·223e·3c74·6162·6c65··"idm9204"><table | |||
| 00044790:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000447a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000447b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000447c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 000447d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 000447e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000447f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00044800:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00044810:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00044820:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00044830:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 00044 | 00044840:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 00044 | 00044850:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 00044860:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00044870:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00044880:·6465·3e2d·2d2d·0a61·7069·5665·7273·696f··de>---.apiVersio | |||
| 00044890:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 000448a0:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| 000448b0:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | |||
| 000448c0:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | |||
| 000448d0:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | |||
| 000448e0:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | |||
| 000448f0:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | |||
| Max diff block lines reached; 1891728/1909446 bytes (99.07%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 630, 14 lines modified | Offset 630, 33 lines modified | ||
| 630 | ··-·PCI-DSSv4-2.2.7 | 630 | ··-·PCI-DSSv4-2.2.7 |
| 631 | ··-·configure_crypto_policy | 631 | ··-·configure_crypto_policy |
| 632 | ··-·high_severity | 632 | ··-·high_severity |
| 633 | ··-·low_complexity | 633 | ··-·low_complexity |
| 634 | ··-·low_disruption | 634 | ··-·low_disruption |
| 635 | ··-·no_reboot_needed | 635 | ··-·no_reboot_needed |
| 636 | ··-·restrict_strategy | 636 | ··-·restrict_strategy |
| 637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 638 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 639 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 640 | rc=$? | ||
| 641 | if·test·"$rc"·=·127;·then | ||
| 642 | » echo·"$stderr_of_call"·>&2 | ||
| 643 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 644 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 645 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 646 | » false··#·end·with·an·error·code | ||
| 647 | elif·test·"$rc"·!=·0;·then | ||
| 648 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 649 | » false··#·end·with·an·error·code | ||
| 650 | fi | ||
| 637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 651 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 638 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 652 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 639 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 653 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 640 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 654 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 641 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 655 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 642 | --- | 656 | --- |
| 643 | apiVersion:·machineconfiguration.openshift.io/v1 | 657 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 655, 33 lines modified | Offset 674, 14 lines modified | ||
| 655 | ············Before=kubelet.service | 674 | ············Before=kubelet.service |
| 656 | ············[Service] | 675 | ············[Service] |
| 657 | ············Type=oneshot | 676 | ············Type=oneshot |
| 658 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 677 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 659 | ············RemainAfterExit=yes | 678 | ············RemainAfterExit=yes |
| 660 | ············[Install] | 679 | ············[Install] |
| 661 | ············WantedBy=multi-user.target | 680 | ············WantedBy=multi-user.target |
| 662 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 663 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 664 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 665 | rc=$? | ||
| 666 | if·test·"$rc"·=·127;·then | ||
| 667 | » echo·"$stderr_of_call"·>&2 | ||
| 668 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 669 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 670 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 671 | » false··#·end·with·an·error·code | ||
| 672 | elif·test·"$rc"·!=·0;·then | ||
| 673 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 674 | » false··#·end·with·an·error·code | ||
| 675 | fi | ||
| 676 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 681 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 677 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 682 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 678 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 683 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 679 | Severity: ···medium | 684 | Severity: ···medium |
| 680 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 685 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 681 | Identifiers:·CCE-83445-7 | 686 | Identifiers:·CCE-83445-7 |
| 682 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 687 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1033, 14 lines modified | Offset 1033, 33 lines modified | ||
| 1033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1034 | The·rear·package·can·be·installed·with·the·following·command: | 1034 | The·rear·package·can·be·installed·with·the·following·command: |
| 1035 | $·sudo·dnf·install·rear | 1035 | $·sudo·dnf·install·rear |
| 1036 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1036 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1037 | Severity: ···medium | 1037 | Severity: ···medium |
| 1038 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 1038 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1039 | Identifiers:·CCE-83503-3 | 1039 | Identifiers:·CCE-83503-3 |
| 1040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1041 | [[packages]] | ||
| 1042 | name·=·"rear" | ||
| 1043 | version·=·"*" | ||
| 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1049 | package·--add=rear | ||
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1055 | package·install·rear | ||
| 1040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1056 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1041 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1057 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1042 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1058 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1043 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1059 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1044 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1060 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1045 | -·name:·Ensure·rear·is·installed | 1061 | -·name:·Ensure·rear·is·installed |
| 1046 | ··package: | 1062 | ··package: |
| Offset 1055, 26 lines modified | Offset 1074, 14 lines modified | ||
| 1055 | ··-·CCE-83503-3 | 1074 | ··-·CCE-83503-3 |
| 1056 | ··-·enable_strategy | 1075 | ··-·enable_strategy |
| 1057 | ··-·low_complexity | 1076 | ··-·low_complexity |
| 1058 | ··-·low_disruption | 1077 | ··-·low_disruption |
| 1059 | ··-·medium_severity | 1078 | ··-·medium_severity |
| 1060 | ··-·no_reboot_needed | 1079 | ··-·no_reboot_needed |
| 1061 | ··-·package_rear_installed | 1080 | ··-·package_rear_installed |
| 1062 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1063 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 153432/159706 bytes (96.07%) of diff not shown. | |||
| Offset 14320, 16 lines modified | Offset 14320, 16 lines modified | ||
| 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f60:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037f60:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037f70:·313 | 00037f70:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16829, 130 lines modified | Offset 16829, 130 lines modified | ||
| 00041bc0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00041bc0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00041bd0:·3932·3032·2220·7461·6269·6e64·6578·3d22··9202"·tabindex=" | 00041bd0:·3932·3032·2220·7461·6269·6e64·6578·3d22··9202"·tabindex=" | ||
| 00041be0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00041be0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00041bf0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00041bf0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00041c00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00041c00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00041c10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00041c10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00041c20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00041c20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00041c30:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 00041c40:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00041c50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00041c60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00041c70:·7073·6522·2069·643d·2269·646d·3932·3032··pse"·id="idm9202 | |||
| 00041c80:·223e·3c70·7265·3e3c·636f·6465·3e0a·7661··"><pre><code>.va | |||
| 00041c30:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00041c40:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00041c50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00041c60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00041c70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00041c80:·646d·3932·3032·223e·3c74·6162·6c65·2063··dm9202"><table·c | |||
| 00041c90:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00041ca0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00041cb0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00041cc0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00041cd0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00041ce0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00041cf0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00041d00:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00041d10:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00041d20:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00041d30:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00041d40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00041d50:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 00041d60:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 00041d70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00041d80:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 00041d90:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 00041da0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 00041db0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 00041dc0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 00041dd0:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 00041de0:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 00041df0:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 00041e00:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 00041e10:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 00041e20:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 00041e30:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 00041e40:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00041e50:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 00041e60:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 00041e70:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 00041e80:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 00041e90:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 00041ea0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 00041eb0:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 00041ec0:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 00041ed0:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 00041ee0:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 00041ef0:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 00041f00:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 00041 | 00041c90:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 00041ca0:·706f·6c69·6379·3d27·3c61·6262·7220·7469··policy='<abbr·ti | |||
| 00041cb0:·746c·653d·2266·726f·6d20·5072·6f66·696c··tle="from·Profil | |||
| 00041cc0:·652f·7265·6669·6e65·2d76·616c·7565·3a20··e/refine-value:· | |||
| 00041cd0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 00041ce0:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 00041cf0:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 00041d00:·7970·746f·5f70·6f6c·6963·7922·3e46·4950··ypto_policy">FIP | |||
| 00041d10:·533c·2f61·6262·723e·270a·0a0a·7374·6465··S</abbr>'...stde | |||
| 00041d20:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | |||
| 00041d30:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 00041d40:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | |||
| 00041f20:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 00041f30:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 00041f40:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 00041f50:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 00041f60:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 00041f70:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 00041f80:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 00041f90:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00041fa0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00041fb0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00041fc0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00041fd0:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | |||
| 00041fe0:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 00041ff0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00042000:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00042010:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00042020:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00042030:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00042040:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00042050:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00042060:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00042070:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00042080:·6522·2069·643d·2269·646d·3932·3033·223e··e"·id="idm9203"> | |||
| 00042090:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0004 | 00041d50:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 000420b0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 000420c0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 000420d0:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 000420e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 000420f0:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 00042100:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | |||
| 00042110:·746f·5f70·6f6c·6963·7922·3e46·4950·533c··to_policy">FIPS< | |||
| 00042120:·2f61·6262·723e·270a·0a0a·7374·6465·7272··/abbr>'...stderr | |||
| 00042130:·5f6f·665f·6361·6c6c·3d24·2875·7064·6174··_of_call=$(updat | |||
| 00042140:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 00042150:·7320·2d2d·7365·7420·247b·7661·725f·7379··s·--set·${var_sy | |||
| 00042160:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0004 | 00041d60:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | ||
| 0004 | 00041d70:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | ||
| Max diff block lines reached; 2004591/2022447 bytes (99.12%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:9 | 50 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 497, 14 lines modified | Offset 497, 33 lines modified | ||
| 497 | ··-·PCI-DSSv4-2.2.7 | 497 | ··-·PCI-DSSv4-2.2.7 |
| 498 | ··-·configure_crypto_policy | 498 | ··-·configure_crypto_policy |
| 499 | ··-·high_severity | 499 | ··-·high_severity |
| 500 | ··-·low_complexity | 500 | ··-·low_complexity |
| 501 | ··-·low_disruption | 501 | ··-·low_disruption |
| 502 | ··-·no_reboot_needed | 502 | ··-·no_reboot_needed |
| 503 | ··-·restrict_strategy | 503 | ··-·restrict_strategy |
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 505 | var_system_crypto_policy='FIPS' | ||
| 506 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 507 | rc=$? | ||
| 508 | if·test·"$rc"·=·127;·then | ||
| 509 | » echo·"$stderr_of_call"·>&2 | ||
| 510 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 511 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 512 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 513 | » false··#·end·with·an·error·code | ||
| 514 | elif·test·"$rc"·!=·0;·then | ||
| 515 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 516 | » false··#·end·with·an·error·code | ||
| 517 | fi | ||
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 518 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 519 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 520 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 521 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 522 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 509 | --- | 523 | --- |
| 510 | apiVersion:·machineconfiguration.openshift.io/v1 | 524 | apiVersion:·machineconfiguration.openshift.io/v1 |
| Offset 522, 33 lines modified | Offset 541, 14 lines modified | ||
| 522 | ············Before=kubelet.service | 541 | ············Before=kubelet.service |
| 523 | ············[Service] | 542 | ············[Service] |
| 524 | ············Type=oneshot | 543 | ············Type=oneshot |
| 525 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | 544 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} |
| 526 | ············RemainAfterExit=yes | 545 | ············RemainAfterExit=yes |
| 527 | ············[Install] | 546 | ············[Install] |
| 528 | ············WantedBy=multi-user.target | 547 | ············WantedBy=multi-user.target |
| 529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 530 | var_system_crypto_policy='FIPS' | ||
| 531 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 532 | rc=$? | ||
| 533 | if·test·"$rc"·=·127;·then | ||
| 534 | » echo·"$stderr_of_call"·>&2 | ||
| 535 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 536 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 537 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 538 | » false··#·end·with·an·error·code | ||
| 539 | elif·test·"$rc"·!=·0;·then | ||
| 540 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 541 | » false··#·end·with·an·error·code | ||
| 542 | fi | ||
| 543 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 548 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 544 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 549 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 545 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 550 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 546 | Severity: ···medium | 551 | Severity: ···medium |
| 547 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 552 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 548 | Identifiers:·CCE-83445-7 | 553 | Identifiers:·CCE-83445-7 |
| 549 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 554 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1552, 14 lines modified | Offset 1552, 25 lines modified | ||
| 1552 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1552 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1553 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1553 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1554 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 | 1554 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1555 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1555 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1556 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1556 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1557 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-211055 | 1557 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-211055 |
| 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule | 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule |
| 1559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1560 | [customizations.services] | ||
| 1561 | masked·=·["debug-shell"] | ||
| 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1567 | service·disable·debug-shell | ||
| 1559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1569 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1570 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1571 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1572 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1564 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1573 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1565 | ····the·System | 1574 | ····the·System |
| Offset 1637, 44 lines modified | Offset 1648, 14 lines modified | ||
| 1637 | ··-·NIST-800-53-CM-6 | 1648 | ··-·NIST-800-53-CM-6 |
| 1638 | ··-·disable_strategy | 1649 | ··-·disable_strategy |
| 1639 | ··-·low_complexity | 1650 | ··-·low_complexity |
| 1640 | ··-·low_disruption | 1651 | ··-·low_disruption |
| 1641 | ··-·medium_severity | 1652 | ··-·medium_severity |
| 1642 | ··-·no_reboot_needed | 1653 | ··-·no_reboot_needed |
| 1643 | ··-·service_debug-shell_disabled | 1654 | ··-·service_debug-shell_disabled |
| 1644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1649 | service·disable·debug-shell | ||
| 1650 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1651 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1652 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 126131/132845 bytes (94.95%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037f00:·313 | 00037f00:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17225, 236 lines modified | Offset 17225, 236 lines modified | ||
| 00043480:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 00043480:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 00043490:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 00043490:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 000434a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 000434a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 000434b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 000434b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 000434c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 000434c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 000434d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 000434d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 000434e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 000434e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 000434f0:·6961·7469·6f6e·204 | 000434f0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00043500:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00043510:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00043520:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00043530:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00043540:·2069·643d·2269·646d·3834·3036·223e·3c70···id="idm8406"><p | |||
| 00043500:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00043510:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00043520:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00043530:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 00043540:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | |||
| 00043550:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00043560:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00043570:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00043580:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00043590:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 000435a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000435b0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000435c0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000435d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000435e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000435f0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00043600:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00043610:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00043620:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00043630:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00043640:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 00043650:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 00043660:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 00043670:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 00043680:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 00043690:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 000436a0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000436b0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000436c0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 000436d0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 000436e0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 000436f0:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 00043700:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 00043710:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 00043720:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 00043730:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00043740:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 00043750:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 00043760:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 00043770:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 00043780:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 00043790:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000437a0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000437b0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000437c0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 000437d0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 000437e0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 000437f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00043800:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00043810:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00043820:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00043830:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00043840:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 00043850:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00043860:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043870:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043880:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043890:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 000438a0:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 000438b0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 000438c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000438d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000438e0:·7365·2220·6964·3d22·6964·6d38·3430·3722··se"·id="idm8407" | |||
| 000438f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00043900:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00043910:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00043920:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00043930:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00043940:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00043950:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00043960:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00043970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043980:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00043990:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 000439a0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 000439b0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000439c0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 000439d0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00043 | 00043550:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 00043560:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 00043570:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 000439f0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 00043a00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00043a10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00043a20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00043a30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00043a40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00043a50:·2223·6964·6d38·3430·3822·2074·6162·696e··"#idm8408"·tabin | |||
| 00043a60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00043a70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043a80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043a90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043aa0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00043ab0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 00043ac0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00043ad0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00043ae0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| Max diff block lines reached; 2437537/2470021 bytes (98.68%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:9 | 48 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 574, 14 lines modified | Offset 574, 33 lines modified | ||
| 574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 575 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 575 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 577 | ·············_\x8c_\x8i_\x8s············6.1.1 | 577 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 578 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 578 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 579 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 579 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 580 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 580 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | [[packages]] | ||
| 583 | name·=·"aide" | ||
| 584 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 590 | package·--add=aide | ||
| 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 596 | package·install·aide | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 586 | -·name:·Ensure·aide·is·installed | 602 | -·name:·Ensure·aide·is·installed |
| 587 | ··package: | 603 | ··package: |
| Offset 597, 26 lines modified | Offset 616, 14 lines modified | ||
| 597 | ··-·PCI-DSSv4-11.5.2 | 616 | ··-·PCI-DSSv4-11.5.2 |
| 598 | ··-·enable_strategy | 617 | ··-·enable_strategy |
| 599 | ··-·low_complexity | 618 | ··-·low_complexity |
| 600 | ··-·low_disruption | 619 | ··-·low_disruption |
| 601 | ··-·medium_severity | 620 | ··-·medium_severity |
| 602 | ··-·no_reboot_needed | 621 | ··-·no_reboot_needed |
| 603 | ··-·package_aide_installed | 622 | ··-·package_aide_installed |
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 609 | package·install·aide | ||
| 610 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 611 | [[packages]] | ||
| 612 | name·=·"aide" | ||
| 613 | version·=·"*" | ||
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 623 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 615 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 624 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 616 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 625 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 617 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 626 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 618 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 627 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 619 | #·Remediation·is·applicable·only·in·certain·platforms | 628 | #·Remediation·is·applicable·only·in·certain·platforms |
| 620 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 629 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 636, 21 lines modified | Offset 643, 14 lines modified | ||
| 636 | include·install_aide | 643 | include·install_aide |
| 637 | class·install_aide·{ | 644 | class·install_aide·{ |
| 638 | ··package·{·'aide': | 645 | ··package·{·'aide': |
| 639 | ····ensure·=>·'installed', | 646 | ····ensure·=>·'installed', |
| 640 | ··} | 647 | ··} |
| 641 | } | 648 | } |
| 642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 647 | package·--add=aide | ||
| 648 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 649 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 649 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 650 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 650 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. | 651 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. |
| 651 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 652 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 652 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 653 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 672, 14 lines modified | Offset 672, 18 lines modified | ||
| 672 | ·············_\x8i_\x8s_\x8m······1446 | 672 | ·············_\x8i_\x8s_\x8m······1446 |
| 673 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 673 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 674 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 674 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 676 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 676 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 677 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 677 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 678 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 678 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 680 | [customizations] | ||
| 681 | fips·=·true | ||
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 682 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 680 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 683 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 681 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 684 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 682 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 685 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 683 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 686 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 684 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 687 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 685 | ··set_fact: | 688 | ··set_fact: |
| Offset 783, 18 lines modified | Offset 787, 14 lines modified | ||
| 783 | ··-·NIST-800-53-SC-13 | 787 | ··-·NIST-800-53-SC-13 |
| 784 | ··-·enable_fips_mode | 788 | ··-·enable_fips_mode |
| 785 | ··-·high_severity | 789 | ··-·high_severity |
| 786 | ··-·medium_complexity | 790 | ··-·medium_complexity |
| 787 | ··-·medium_disruption | 791 | ··-·medium_disruption |
| 788 | ··-·reboot_required | 792 | ··-·reboot_required |
| 789 | ··-·restrict_strategy | 793 | ··-·restrict_strategy |
| 790 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 202992/209428 bytes (96.93%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·313 | 00037e50:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15582, 267 lines modified | Offset 15582, 267 lines modified | ||
| 0003cdd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003cdd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003cde0:·3839·3836·2220·7461·6269·6e64·6578·3d22··8986"·tabindex=" | 0003cde0:·3839·3836·2220·7461·6269·6e64·6578·3d22··8986"·tabindex=" | ||
| 0003cdf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003cdf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ce00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003ce00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ce10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ce10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ce20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ce20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ce30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ce30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ce40:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003ce50:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ce60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ce70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ce80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ce90:·2220·6964·3d22·6964·6d38·3938·3622·3e3c··"·id="idm8986">< | |||
| 0003cea0:·7072·653e·3c63·6f64·653e·0a5b·6375·7374··pre><code>.[cust | |||
| 0003ceb0:·6f6d·697a·6174·696f·6e73·5d0a·6669·7073··omizations].fips | |||
| 0003cec0:·203d·2074·7275·650a·3c2f·636f·6465·3e3c···=·true.</code>< | |||
| 0003ced0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003cee0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003cef0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003cf00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003cf10:·612d·7461·7267·6574·3d22·2369·646d·3839··a-target="#idm89 | |||
| 0003cf20:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | |||
| 0003cf30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003cf40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003cf50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003cf60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003cf70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c | 0003cf80:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003c | 0003cf90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003c | 0003cfa0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003c | 0003cfb0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003c | 0003cfc0:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | ||
| 0003c | 0003cfd0:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003c | 0003cfe0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003c | 0003cff0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003 | 0003d000:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003 | 0003d010:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003 | 0003d020:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003 | 0003d030:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003 | 0003d040:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003 | 0003d050:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003 | 0003d060:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003 | 0003d070:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003 | 0003d080:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | ||
| 0003 | 0003d090:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003d0a0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003 | 0003d0b0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003 | 0003d0c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003 | 0003d0d0:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | ||
| 0003 | 0003d0e0:·5661·6c75·6520·7661·725f·7379·7374·656d··Value·var_system | ||
| 0003 | 0003d0f0:·5f63·7279·7074·6f5f·706f·6c69·6379·2023··_crypto_policy·# | ||
| 0003 | 0003d100:·2070·726f·6d6f·7465·2074·6f20·7661·7269···promote·to·vari | ||
| 0003 | 0003d110:·6162·6c65·0a20·2073·6574·5f66·6163·743a··able.··set_fact: | ||
| 0003 | 0003d120:·0a20·2020·2076·6172·5f73·7973·7465·6d5f··.····var_system_ | ||
| 0003 | 0003d130:·6372·7970·746f·5f70·6f6c·6963·793a·2021··crypto_policy:·! | ||
| 0003d | 0003d140:·2173·7472·203c·6162·6272·2074·6974·6c65··!str·<abbr·title | ||
| 0003d | 0003d150:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | ||
| 0003d | 0003d160:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | ||
| 0003d | 0003d170:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 0003d | 0003d180:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | ||
| 0003d | 0003d190:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 0003d | 0003d1a0:·6f5f·706f·6c69·6379·223e·4649·5053·3a4f··o_policy">FIPS:O | ||
| 0003d | 0003d1b0:·5350·503c·2f61·6262·723e·0a20·2074·6167··SPP</abbr>.··tag | ||
| 0003d | 0003d1c0:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | ||
| 0003d | 0003d1d0:·0a2d·206e·616d·653a·2045·6e61·626c·6520··.-·name:·Enable· | ||
| 0003d | 0003d1e0:·4649·5053·204d·6f64·6520·2d20·4368·6563··FIPS·Mode·-·Chec | ||
| 0003d | 0003d1f0:·6b20·746f·2053·6565·2074·6865·2043·7572··k·to·See·the·Cur | ||
| 0003d | 0003d200:·7265·6e74·2053·7461·7475·7320·6f66·2046··rent·Status·of·F | ||
| 0003d | 0003d210:·4950·5320·4d6f·6465·0a20·2061·6e73·6962··IPS·Mode.··ansib | ||
| 0003d | 0003d220:·6c65·2e62·7569·6c74·696e·2e63·6f6d·6d61··le.builtin.comma | ||
| 0003d | 0003d230:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | ||
| 0003d | 0003d240:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | ||
| 0003d | 0003d250:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | ||
| 0003d | 0003d260:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | ||
| 0003d | 0003d270:·0a20·2066·6169·6c65·645f·7768·656e·3a20··.··failed_when:· | ||
| 0003d | 0003d280:·6661·6c73·650a·2020·6368·616e·6765·645f··false.··changed_ | ||
| 0003d | 0003d290:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | ||
| 0003d | 0003d2a0:·656e·3a0a·2020·2d20·2820·616e·7369·626c··en:.··-·(·ansibl | ||
| 0003d | 0003d2b0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 0003d | 0003d2c0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 0003d | 0003d2d0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 0003d | 0003d2e0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 0003d | 0003d2f0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 0003d | 0003d300:·2020·2020·616e·6420·6e6f·7420·2820·6c6f······and·not·(·lo | ||
| 0003d | 0003d310:·6f6b·7570·2822·656e·7622·2c20·2263·6f6e··okup("env",·"con | ||
| 0003d | 0003d320:·7461·696e·6572·2229·203d·3d20·2262·7772··tainer")·==·"bwr | ||
| 0003d | 0003d330:·6170·2d6f·7362·7569·6c64·2220·2920·290a··ap-osbuild"·)·). | ||
| 0003d | 0003d340:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 0003d | 0003d350:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | ||
| 0003d | 0003d360:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | ||
| 0003d | 0003d370:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | ||
| 0003d | 0003d380:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | ||
| 0003d | 0003d390:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | ||
| 0003d | 0003d3a0:·3a0a·2020·2d20·4343·452d·3838·3734·322d··:.··-·CCE-88742- | ||
| 0003d | 0003d3b0:·320a·2020·2d20·4449·5341·2d53·5449·472d··2.··-·DISA-STIG- | ||
| 0003d | 0003d3c0:·5248·454c·2d30·392d·3637·3130·3130·0a20··RHEL-09-671010.· | ||
| 0003d | 0003d3d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003d | 0003d3e0:·4d2d·3328·3629·0a20·202d·204e·4953·542d··M-3(6).··-·NIST- | ||
| 0003d | 0003d3f0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | ||
| 0003d | 0003d400:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | ||
| 0003d | 0003d410:·412d·370a·2020·2d20·4e49·5354·2d38·3030··A-7.··-·NIST-800 | ||
| 0003d | 0003d420:·2d35·332d·5343·2d31·320a·2020·2d20·4e49··-53-SC-12.··-·NI | ||
| 0003d430:·5354·2d38·3030·2d35·332d·5343·2d31·3228··ST-800-53-SC-12( | |||
| 0003d440:·3229·0a20·202d·204e·4953·542d·3830·302d··2).··-·NIST-800- | |||
| 0003d450:·3533·2d53·432d·3132·2833·290a·2020·2d20··53-SC-12(3).··-· | |||
| 0003d | 0003d460:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | ||
| 0003d300:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003d310:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003d320:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003d | 0003d470:·330a·2020·2d20·656e·6162·6c65·5f66·6970··3.··-·enable_fip | ||
| Max diff block lines reached; 2648377/2685139 bytes (98.63%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 199, 14 lines modified | Offset 199, 18 lines modified | ||
| 199 | ·············_\x8i_\x8s_\x8m······1446 | 199 | ·············_\x8i_\x8s_\x8m······1446 |
| 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | [customizations] | ||
| 208 | fips·=·true | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 211 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 214 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 212 | ··set_fact: | 215 | ··set_fact: |
| Offset 310, 18 lines modified | Offset 314, 14 lines modified | ||
| 310 | ··-·NIST-800-53-SC-13 | 314 | ··-·NIST-800-53-SC-13 |
| 311 | ··-·enable_fips_mode | 315 | ··-·enable_fips_mode |
| 312 | ··-·high_severity | 316 | ··-·high_severity |
| 313 | ··-·medium_complexity | 317 | ··-·medium_complexity |
| 314 | ··-·medium_disruption | 318 | ··-·medium_disruption |
| 315 | ··-·reboot_required | 319 | ··-·reboot_required |
| 316 | ··-·restrict_strategy | 320 | ··-·restrict_strategy |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 318 | [customizations] | ||
| 319 | fips·=·true | ||
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | 322 | #·Remediation·is·applicable·only·in·certain·platforms |
| 322 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 323 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 323 | var_system_crypto_policy='FIPS:OSPP' | 324 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 362, 14 lines modified | Offset 362, 33 lines modified | ||
| 362 | Severity: ···medium | 362 | Severity: ···medium |
| 363 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 363 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 364 | Identifiers:·CCE-83442-4 | 364 | Identifiers:·CCE-83442-4 |
| 365 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 365 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 366 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 366 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 | 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 |
| 368 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 368 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 370 | [[packages]] | ||
| 371 | name·=·"crypto-policies" | ||
| 372 | version·=·"*" | ||
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 378 | package·--add=crypto-policies | ||
| 379 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 380 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 381 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 382 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 383 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 384 | package·install·crypto-policies | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 374 | -·name:·Ensure·crypto-policies·is·installed | 390 | -·name:·Ensure·crypto-policies·is·installed |
| 375 | ··package: | 391 | ··package: |
| Offset 380, 26 lines modified | Offset 399, 14 lines modified | ||
| 380 | ··-·DISA-STIG-RHEL-09-672010 | 399 | ··-·DISA-STIG-RHEL-09-672010 |
| 381 | ··-·enable_strategy | 400 | ··-·enable_strategy |
| 382 | ··-·low_complexity | 401 | ··-·low_complexity |
| 383 | ··-·low_disruption | 402 | ··-·low_disruption |
| 384 | ··-·medium_severity | 403 | ··-·medium_severity |
| 385 | ··-·no_reboot_needed | 404 | ··-·no_reboot_needed |
| 386 | ··-·package_crypto-policies_installed | 405 | ··-·package_crypto-policies_installed |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 392 | package·install·crypto-policies | ||
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 394 | [[packages]] | ||
| 395 | name·=·"crypto-policies" | ||
| 396 | version·=·"*" | ||
| 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 398 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 399 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 400 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 401 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 402 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 411 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| Offset 413, 21 lines modified | Offset 420, 14 lines modified | ||
| 413 | include·install_crypto-policies | 420 | include·install_crypto-policies |
| 414 | class·install_crypto-policies·{ | 421 | class·install_crypto-policies·{ |
| 415 | ··package·{·'crypto-policies': | 422 | ··package·{·'crypto-policies': |
| 416 | ····ensure·=>·'installed', | 423 | ····ensure·=>·'installed', |
| 417 | ··} | 424 | ··} |
| 418 | } | 425 | } |
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| Max diff block lines reached; 356722/362663 bytes (98.36%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e40:·2032·3032·3 | 00037e40:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 16527, 237 lines modified | Offset 16527, 237 lines modified | ||
| 000408e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000408e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000408f0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 000408f0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 00040900:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00040900:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00040910:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00040910:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00040920:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00040920:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00040930:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00040930:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00040940:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00040940:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00040950:·5265·6d65·6469·6174·696f·6e20·4 | 00040950:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00040960:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 00040970:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040980:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040990:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000409a0:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 00040960:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00040970:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040980:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040990:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000409a0:·6964·6d38·3430·3622·3e3c·7461·626c·6520··idm8406"><table· | |||
| 000409b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000409c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000409d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000409e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000409f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00040a00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040a10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00040a20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040a30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040a40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040a50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040a60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040a70:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00040a80:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040a90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040aa0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00040ab0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 00040ac0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 00040ad0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 00040ae0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 00040af0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 00040b00:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00040b10:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00040b20:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00040b30:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00040b40:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00040b50:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 00040b60:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 00040b70:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00040b80:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 00040b90:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 00040ba0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00040bb0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 00040bc0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 00040bd0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 00040be0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00040bf0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00040c00:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00040c10:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00040c20:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00040c30:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00040c40:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 00040c50:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00040c60:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040c70:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040c80:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040c90:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00040ca0:·7267·6574·3d22·2369·646d·3834·3037·2220··rget="#idm8407"· | |||
| 00040cb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00040cc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00040cd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040ce0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040cf0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040d00:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040d10:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 00040d20:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040d30:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040d40:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040d50:·3834·3037·223e·3c74·6162·6c65·2063·6c61··8407"><table·cla | |||
| 00040d60:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040d70:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040d80:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040d90:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040da0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040db0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040dc0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040dd0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040de0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040df0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040e00:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040e10:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00040e20:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00040e30:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00040 | 000409b0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | ||
| 000409c0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000409d0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 000409e0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00040e50:·6163·6b61·6765·2069·6e73·7461·6c6c·2061··ackage·install·a | |||
| 00040e60:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 00040e70:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040e80:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040e90:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040ea0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00040eb0:·7267·6574·3d22·2369·646d·3834·3038·2220··rget="#idm8408"· | |||
| 00040ec0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00040ed0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00040ee0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040ef0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040f00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040f10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040f20:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00040f30:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00040f40:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| Max diff block lines reached; 2855154/2887638 bytes (98.88%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 426, 14 lines modified | Offset 426, 33 lines modified | ||
| 426 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 426 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 428 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 428 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 429 | ·············_\x8c_\x8i_\x8s············6.1.1 | 429 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 430 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 430 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 431 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 431 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 432 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 432 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 434 | [[packages]] | ||
| 435 | name·=·"aide" | ||
| 436 | version·=·"*" | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 442 | package·--add=aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package·install·aide | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 438 | -·name:·Ensure·aide·is·installed | 454 | -·name:·Ensure·aide·is·installed |
| 439 | ··package: | 455 | ··package: |
| Offset 449, 26 lines modified | Offset 468, 14 lines modified | ||
| 449 | ··-·PCI-DSSv4-11.5.2 | 468 | ··-·PCI-DSSv4-11.5.2 |
| 450 | ··-·enable_strategy | 469 | ··-·enable_strategy |
| 451 | ··-·low_complexity | 470 | ··-·low_complexity |
| 452 | ··-·low_disruption | 471 | ··-·low_disruption |
| 453 | ··-·medium_severity | 472 | ··-·medium_severity |
| 454 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 455 | ··-·package_aide_installed | 474 | ··-·package_aide_installed |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 461 | package·install·aide | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 463 | [[packages]] | ||
| 464 | name·=·"aide" | ||
| 465 | version·=·"*" | ||
| 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 471 | #·Remediation·is·applicable·only·in·certain·platforms | 480 | #·Remediation·is·applicable·only·in·certain·platforms |
| 472 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 481 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 488, 21 lines modified | Offset 495, 14 lines modified | ||
| 488 | include·install_aide | 495 | include·install_aide |
| 489 | class·install_aide·{ | 496 | class·install_aide·{ |
| 490 | ··package·{·'aide': | 497 | ··package·{·'aide': |
| 491 | ····ensure·=>·'installed', | 498 | ····ensure·=>·'installed', |
| 492 | ··} | 499 | ··} |
| 493 | } | 500 | } |
| 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 499 | package·--add=aide | ||
| 500 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 501 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 501 | Run·the·following·command·to·generate·a·new·database: | 502 | Run·the·following·command·to·generate·a·new·database: |
| 502 | $·sudo·/usr/sbin/aide·--init | 503 | $·sudo·/usr/sbin/aide·--init |
| 503 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 504 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 504 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 505 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 505 | To·initiate·a·manual·check,·run·the·following·command: | 506 | To·initiate·a·manual·check,·run·the·following·command: |
| 506 | $·sudo·/usr/sbin/aide·--check | 507 | $·sudo·/usr/sbin/aide·--check |
| Offset 875, 14 lines modified | Offset 875, 33 lines modified | ||
| 875 | ··-·PCI-DSSv4-2.2.7 | 875 | ··-·PCI-DSSv4-2.2.7 |
| 876 | ··-·configure_crypto_policy | 876 | ··-·configure_crypto_policy |
| 877 | ··-·high_severity | 877 | ··-·high_severity |
| 878 | ··-·low_complexity | 878 | ··-·low_complexity |
| 879 | ··-·low_disruption | 879 | ··-·low_disruption |
| 880 | ··-·no_reboot_needed | 880 | ··-·no_reboot_needed |
| 881 | ··-·restrict_strategy | 881 | ··-·restrict_strategy |
| 882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 883 | var_system_crypto_policy='DEFAULT' | ||
| 884 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 885 | rc=$? | ||
| 886 | if·test·"$rc"·=·127;·then | ||
| 887 | » echo·"$stderr_of_call"·>&2 | ||
| 888 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 889 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 890 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 891 | » false··#·end·with·an·error·code | ||
| 892 | elif·test·"$rc"·!=·0;·then | ||
| 893 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 894 | » false··#·end·with·an·error·code | ||
| 895 | fi | ||
| 882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 883 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 220925/226563 bytes (97.51%) of diff not shown. | |||
| Offset 14311, 15 lines modified | Offset 14311, 15 lines modified | ||
| 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037ed0:·7320·6f66·2032·3032·3 | 00037ed0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15153, 237 lines modified | Offset 15153, 237 lines modified | ||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b380:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b390:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b3b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b3c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b380:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3c0:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b3f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b410:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b420:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b430:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b440:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b450:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b470:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b490:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4c0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b4f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b500:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b510:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b520:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b530:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b540:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b550:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b560:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b570:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b580:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b590:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5a0:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b5b0:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b5c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b5d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b5e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b5f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b600:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b610:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b620:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b630:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b640:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b650:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b660:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b670:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b680:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b690:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b6c0:·7461·7267·6574·3d22·2369·646d·3834·3037··target="#idm8407 | |||
| 0003b6d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b6e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b6f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b700:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b710:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b720:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b730:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b740:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b750:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b760:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b770:·646d·3834·3037·223e·3c74·6162·6c65·2063··dm8407"><table·c | |||
| 0003b780:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b790:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b7a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b7b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b7c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b7d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b7e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b7f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b800:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b810:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b820:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b830:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b840:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b850:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b | 0003b3d0:·3430·3622·3e3c·7072·653e·3c63·6f64·653e··406"><pre><code> | ||
| 0003b3e0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b3f0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b400:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b870:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003b880:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003b890:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b8a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b8b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b8c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b8d0:·7461·7267·6574·3d22·2369·646d·3834·3038··target="#idm8408 | |||
| 0003b8e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b8f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b900:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b910:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b920:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b930:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b940:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b950:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b960:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| Max diff block lines reached; 5560794/5593278 bytes (99.42%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:redhat:enterprise_linux:9 | 47 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 14 lines modified | Offset 109, 33 lines modified | ||
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 111 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 112 | ·············_\x8c_\x8i_\x8s············6.1.1 | 112 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 114 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | [[packages]] | ||
| 118 | name·=·"aide" | ||
| 119 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·install·aide | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 122 | ··package: | 138 | ··package: |
| Offset 132, 26 lines modified | Offset 151, 14 lines modified | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 133 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 153 | ··-·low_complexity |
| 135 | ··-·low_disruption | 154 | ··-·low_disruption |
| 136 | ··-·medium_severity | 155 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 138 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 171, 21 lines modified | Offset 178, 14 lines modified | ||
| 171 | include·install_aide | 178 | include·install_aide |
| 172 | class·install_aide·{ | 179 | class·install_aide·{ |
| 173 | ··package·{·'aide': | 180 | ··package·{·'aide': |
| 174 | ····ensure·=>·'installed', | 181 | ····ensure·=>·'installed', |
| 175 | ··} | 182 | ··} |
| 176 | } | 183 | } |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·--add=aide | ||
| 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 184 | Run·the·following·command·to·generate·a·new·database: | 185 | Run·the·following·command·to·generate·a·new·database: |
| 185 | $·sudo·/usr/sbin/aide·--init | 186 | $·sudo·/usr/sbin/aide·--init |
| 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 187 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 188 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 188 | To·initiate·a·manual·check,·run·the·following·command: | 189 | To·initiate·a·manual·check,·run·the·following·command: |
| 189 | $·sudo·/usr/sbin/aide·--check | 190 | $·sudo·/usr/sbin/aide·--check |
| Offset 1997, 14 lines modified | Offset 1997, 18 lines modified | ||
| 1997 | ·············_\x8i_\x8s_\x8m······1446 | 1997 | ·············_\x8i_\x8s_\x8m······1446 |
| 1998 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1998 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1999 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1999 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 2000 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 2000 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 2001 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 2001 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 2002 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 2002 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 2003 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 2003 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2005 | [customizations] | ||
| 2006 | fips·=·true | ||
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2007 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 2008 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 2006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2009 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2010 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 2011 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 2009 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 2012 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 2010 | ··set_fact: | 2013 | ··set_fact: |
| Offset 2108, 18 lines modified | Offset 2112, 14 lines modified | ||
| 2108 | ··-·NIST-800-53-SC-13 | 2112 | ··-·NIST-800-53-SC-13 |
| 2109 | ··-·enable_fips_mode | 2113 | ··-·enable_fips_mode |
| 2110 | ··-·high_severity | 2114 | ··-·high_severity |
| 2111 | ··-·medium_complexity | 2115 | ··-·medium_complexity |
| 2112 | ··-·medium_disruption | 2116 | ··-·medium_disruption |
| 2113 | ··-·reboot_required | 2117 | ··-·reboot_required |
| 2114 | ··-·restrict_strategy | 2118 | ··-·restrict_strategy |
| 2115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 508621/514658 bytes (98.83%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038050:·2032·3032·3 | 00038050:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15172, 236 lines modified | Offset 15172, 236 lines modified | ||
| 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4a0:·6961·7469·6f6e·204 | 0003b4a0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b4b0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b4c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b4d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b4e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b4f0:·2069·643d·2269·646d·3834·3036·223e·3c70···id="idm8406"><p | |||
| 0003b4b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b4e0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b4f0:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | |||
| 0003b500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b520:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b540:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b550:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b570:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b590:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b5d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b5e0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b5f0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b600:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b610:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b620:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b630:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b640:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b650:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b660:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b670:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b680:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b690:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b6a0:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 0003b6b0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b6c0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b6d0:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b6e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b6f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b700:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b710:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b720:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b730:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b740:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b750:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b760:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b770:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b780:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b790:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b7a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b7b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b7c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b7d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b7f0:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 0003b800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b850:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003b860:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b870:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b880:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b890:·7365·2220·6964·3d22·6964·6d38·3430·3722··se"·id="idm8407" | |||
| 0003b8a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b8b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b8c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b8d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b8e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b8f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b900:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b910:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b920:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b930:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b940:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b950:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b960:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b970:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b980:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b | 0003b500:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 0003b510:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b520:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b9a0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003b9b0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b9c0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b9d0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b9e0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b9f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ba00:·2223·6964·6d38·3430·3822·2074·6162·696e··"#idm8408"·tabin | |||
| 0003ba10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ba20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ba30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ba40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ba50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ba60:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003ba70:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003ba80:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba90:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003baa0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| Max diff block lines reached; 5490050/5522396 bytes (99.41%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 52 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 52 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:9 | 53 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 33 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ·············_\x8c_\x8i_\x8s············6.1.1 | 117 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 143 | ··package: |
| Offset 137, 26 lines modified | Offset 156, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 158 | ··-·low_complexity |
| 140 | ··-·low_disruption | 159 | ··-·low_disruption |
| 141 | ··-·medium_severity | 160 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·install·aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 21 lines modified | Offset 183, 14 lines modified | ||
| 176 | include·install_aide | 183 | include·install_aide |
| 177 | class·install_aide·{ | 184 | class·install_aide·{ |
| 178 | ··package·{·'aide': | 185 | ··package·{·'aide': |
| 179 | ····ensure·=>·'installed', | 186 | ····ensure·=>·'installed', |
| 180 | ··} | 187 | ··} |
| 181 | } | 188 | } |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·--add=aide | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 193 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 194 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 2002, 14 lines modified | Offset 2002, 18 lines modified | ||
| 2002 | ·············_\x8i_\x8s_\x8m······1446 | 2002 | ·············_\x8i_\x8s_\x8m······1446 |
| 2003 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 2003 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 2004 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 2004 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 2005 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 2005 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 2006 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 2006 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 2007 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 2007 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 2008 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 2008 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 2009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2010 | [customizations] | ||
| 2011 | fips·=·true | ||
| 2009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2012 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2010 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 2013 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 2011 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2014 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2012 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2015 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2013 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 2016 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 2014 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 2017 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 2015 | ··set_fact: | 2018 | ··set_fact: |
| Offset 2113, 18 lines modified | Offset 2117, 14 lines modified | ||
| 2113 | ··-·NIST-800-53-SC-13 | 2117 | ··-·NIST-800-53-SC-13 |
| 2114 | ··-·enable_fips_mode | 2118 | ··-·enable_fips_mode |
| 2115 | ··-·high_severity | 2119 | ··-·high_severity |
| 2116 | ··-·medium_complexity | 2120 | ··-·medium_complexity |
| 2117 | ··-·medium_disruption | 2121 | ··-·medium_disruption |
| 2118 | ··-·reboot_required | 2122 | ··-·reboot_required |
| 2119 | ··-·restrict_strategy | 2123 | ··-·restrict_strategy |
| 2120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 500090/506140 bytes (98.80%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e30:·6620·3230·323 | 00037e30:·6620·3230·3234·2d31·312d·3039·290a·2020··f·2024-11-09).·· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 16392, 200 lines modified | Offset 16392, 200 lines modified | ||
| 00040070:·2d74·6172·6765·743d·2223·6964·6d31·3932··-target="#idm192 | 00040070:·2d74·6172·6765·743d·2223·6964·6d31·3932··-target="#idm192 | ||
| 00040080:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00040080:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00040090:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00040090:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000400a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000400a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000400b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000400b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 000400c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 000400c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 000400d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 000400d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 000400e0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 000400f0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 000400e0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 000400f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00040100:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040110:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040120:·7073·6522·2069·643d·2269·646d·3139·3230··pse"·id="idm1920 | |||
| 00040130:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040140:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040150:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040160:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040170:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040180:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040190:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000401a0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000401b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000401c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000401d0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 000401e0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 000401f0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00040200:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00040210:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00040220:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00040230:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 00040240:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00040250:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00040260:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 00040270:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 00040280:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00040290:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000402a0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000402b0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000402c0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 000402d0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 000402e0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 000402f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00040300:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 00040310:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 00040320:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 00040330:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00040340:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00040350:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00040360:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00040370:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00040380:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00040390:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 000403a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 000403b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 000403c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 000403d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 000403e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 000403f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00040400:·3d22·2369·646d·3139·3231·2220·7461·6269··="#idm1921"·tabi | |||
| 00040410:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00040420:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00040430:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00040440:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00040450:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00040460:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 00040470:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00040480:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040490:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 000404a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 000404b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 000404c0:·3932·3122·3e3c·7072·653e·3c63·6f64·653e··921"><pre><code> | |||
| 000404d0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 000404e0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 000404f0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00040500:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040510:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040520:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040530:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040540:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040550:·3139·3232·2220·7461·6269·6e64·6578·3d22··1922"·tabindex=" | |||
| 00040560:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040570:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040580:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040590:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 000405a0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 000405b0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 000405c0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 000405d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 000405e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 000405f0:·7073·6522·2069·643d·2269·646d·3139·3232··pse"·id="idm1922 | |||
| 00040600:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040610:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040620:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040630:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040640:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040650:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040660:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040670:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00040680:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040690:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000406a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 000406b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 000406c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 000406d0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 000406e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 000406f0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 00040700:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 00040710:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 00040720:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 00040730:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| Max diff block lines reached; 234595/261973 bytes (89.55%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ··············(RHVH) | 39 | ··············(RHVH) |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 409, 14 lines modified | Offset 409, 26 lines modified | ||
| 409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 410 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 410 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 417 | [[packages]] | ||
| 418 | name·=·"aide" | ||
| 419 | version·=·"*" | ||
| 420 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 421 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 422 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 423 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 424 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 425 | package·--add=aide | ||
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 421 | -·name:·Ensure·aide·is·installed | 431 | -·name:·Ensure·aide·is·installed |
| 422 | ··package: | 432 | ··package: |
| Offset 430, 19 lines modified | Offset 442, 14 lines modified | ||
| 430 | ··-·PCI-DSSv4-11.5.2 | 442 | ··-·PCI-DSSv4-11.5.2 |
| 431 | ··-·enable_strategy | 443 | ··-·enable_strategy |
| 432 | ··-·low_complexity | 444 | ··-·low_complexity |
| 433 | ··-·low_disruption | 445 | ··-·low_disruption |
| 434 | ··-·medium_severity | 446 | ··-·medium_severity |
| 435 | ··-·no_reboot_needed | 447 | ··-·no_reboot_needed |
| 436 | ··-·package_aide_installed | 448 | ··-·package_aide_installed |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | [[packages]] | ||
| 439 | name·=·"aide" | ||
| 440 | version·=·"*" | ||
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 446 | #·Remediation·is·applicable·only·in·certain·platforms | 454 | #·Remediation·is·applicable·only·in·certain·platforms |
| 447 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 455 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 462, 21 lines modified | Offset 469, 14 lines modified | ||
| 462 | include·install_aide | 469 | include·install_aide |
| 463 | class·install_aide·{ | 470 | class·install_aide·{ |
| 464 | ··package·{·'aide': | 471 | ··package·{·'aide': |
| 465 | ····ensure·=>·'installed', | 472 | ····ensure·=>·'installed', |
| 466 | ··} | 473 | ··} |
| 467 | } | 474 | } |
| 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 473 | package·--add=aide | ||
| 474 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 475 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 475 | Run·the·following·command·to·generate·a·new·database: | 476 | Run·the·following·command·to·generate·a·new·database: |
| 476 | $·sudo·/usr/sbin/aide·--init | 477 | $·sudo·/usr/sbin/aide·--init |
| 477 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 478 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 478 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 479 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 479 | To·initiate·a·manual·check,·run·the·following·command: | 480 | To·initiate·a·manual·check,·run·the·following·command: |
| 480 | $·sudo·/usr/sbin/aide·--check | 481 | $·sudo·/usr/sbin/aide·--check |
| Offset 6870, 14 lines modified | Offset 6870, 26 lines modified | ||
| 6870 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. | 6870 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. |
| 6871 | Severity: ··medium | 6871 | Severity: ··medium |
| 6872 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed | 6872 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed |
| 6873 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 | 6873 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 |
| 6874 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 6874 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 6875 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 6875 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 6876 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 | 6876 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 |
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6878 | [[packages]] | ||
| 6879 | name·=·"opensc" | ||
| 6880 | version·=·"*" | ||
| 6881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6882 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 6883 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 6884 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 6885 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 6886 | package·--add=opensc | ||
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 6887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 6878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6888 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6889 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6890 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 6891 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 6882 | -·name:·Ensure·opensc·is·installed | 6892 | -·name:·Ensure·opensc·is·installed |
| 6883 | ··package: | 6893 | ··package: |
| Offset 6888, 19 lines modified | Offset 6900, 14 lines modified | ||
| 6888 | ··-·NIST-800-53-CM-6(a) | 6900 | ··-·NIST-800-53-CM-6(a) |
| 6889 | ··-·enable_strategy | 6901 | ··-·enable_strategy |
| 6890 | ··-·low_complexity | 6902 | ··-·low_complexity |
| 6891 | ··-·low_disruption | 6903 | ··-·low_disruption |
| 6892 | ··-·medium_severity | 6904 | ··-·medium_severity |
| 6893 | ··-·no_reboot_needed | 6905 | ··-·no_reboot_needed |
| 6894 | ··-·package_opensc_installed | 6906 | ··-·package_opensc_installed |
| 6895 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6896 | [[packages]] | ||
| 6897 | name·=·"opensc" | ||
| 6898 | version·=·"*" | ||
| 6899 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 6907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 6900 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6901 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 33423/39527 bytes (84.56%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·313 | 00037e50:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17050, 201 lines modified | Offset 17050, 201 lines modified | ||
| 00042990:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00042990:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000429a0:·646d·3139·3230·2220·7461·6269·6e64·6578··dm1920"·tabindex | 000429a0:·646d·3139·3230·2220·7461·6269·6e64·6578··dm1920"·tabindex | ||
| 000429b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000429b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000429c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000429c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000429d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000429d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000429e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000429e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000429f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000429f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00042a00:·6d65·6469·6174·696f·6e20·4 | 00042a00:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00042a10:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00042a10:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00042a20:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00042a30:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00042a40:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00042a50:·6d31·3932·3022·3e3c·7461·626c·6520·636c··m1920"><table·cl | |||
| 00042a60:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00042a70:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00042a80:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00042a90:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00042aa0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00042ab0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00042ac0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00042ad0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00042ae0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00042af0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042b00:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00042b10:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00042b20:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00042b30:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00042b40:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00042b50:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 00042b60:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 00042b70:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 00042b80:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 00042b90:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 00042ba0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00042bb0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00042bc0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00042bd0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00042be0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00042bf0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00042c00:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 00042c10:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 00042c20:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 00042c30:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 00042c40:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 00042c50:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 00042c60:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 00042c70:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 00042c80:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 00042c90:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00042ca0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00042cb0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00042cc0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 00042cd0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 00042ce0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00042cf0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00042d00:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00042d10:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00042d20:·6172·6765·743d·2223·6964·6d31·3932·3122··arget="#idm1921" | |||
| 00042d30:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00042d40:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00042d50:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00042d60:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00042d70:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00042d80:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00042d90:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 00042da0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 00042db0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00042dc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00042dd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00042de0:·2269·646d·3139·3231·223e·3c70·7265·3e3c··"idm1921"><pre>< | |||
| 00042df0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 00042e00:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 00042e10:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 00042e20:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00042e30:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00042e40:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00042e50:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00042e60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00042e70:·2223·6964·6d31·3932·3222·2074·6162·696e··"#idm1922"·tabin | |||
| 00042e80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00042e90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00042ea0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00042eb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00042ec0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00042ed0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 00042ee0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00042ef0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00042f00:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00042f10:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00042f20:·6d31·3932·3222·3e3c·7461·626c·6520·636c··m1922"><table·cl | |||
| 00042f30:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00042f40:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00042f50:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00042f60:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00042f70:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00042f80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00042f90:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00042fa0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00042fb0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00042fc0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042fd0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00042fe0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00042ff0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00043000:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00043010:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 00043020:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 00043030:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 00043040:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 00043050:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| Max diff block lines reached; 956234/983888 bytes (97.19%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Virtualization·Host·(RHVH) | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Virtualization·Host·(RHVH) |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 41 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 42 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 42 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 552, 14 lines modified | Offset 552, 26 lines modified | ||
| 552 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 552 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 553 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 553 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 554 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 554 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 556 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 556 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 557 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 557 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 560 | [[packages]] | ||
| 561 | name·=·"aide" | ||
| 562 | version·=·"*" | ||
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 568 | package·--add=aide | ||
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 572 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 573 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 564 | -·name:·Ensure·aide·is·installed | 574 | -·name:·Ensure·aide·is·installed |
| 565 | ··package: | 575 | ··package: |
| Offset 573, 19 lines modified | Offset 585, 14 lines modified | ||
| 573 | ··-·PCI-DSSv4-11.5.2 | 585 | ··-·PCI-DSSv4-11.5.2 |
| 574 | ··-·enable_strategy | 586 | ··-·enable_strategy |
| 575 | ··-·low_complexity | 587 | ··-·low_complexity |
| 576 | ··-·low_disruption | 588 | ··-·low_disruption |
| 577 | ··-·medium_severity | 589 | ··-·medium_severity |
| 578 | ··-·no_reboot_needed | 590 | ··-·no_reboot_needed |
| 579 | ··-·package_aide_installed | 591 | ··-·package_aide_installed |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | [[packages]] | ||
| 582 | name·=·"aide" | ||
| 583 | version·=·"*" | ||
| 584 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 585 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 586 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 587 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 588 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 589 | #·Remediation·is·applicable·only·in·certain·platforms | 597 | #·Remediation·is·applicable·only·in·certain·platforms |
| 590 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 598 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 605, 21 lines modified | Offset 612, 14 lines modified | ||
| 605 | include·install_aide | 612 | include·install_aide |
| 606 | class·install_aide·{ | 613 | class·install_aide·{ |
| 607 | ··package·{·'aide': | 614 | ··package·{·'aide': |
| 608 | ····ensure·=>·'installed', | 615 | ····ensure·=>·'installed', |
| 609 | ··} | 616 | ··} |
| 610 | } | 617 | } |
| 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 616 | package·--add=aide | ||
| 617 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 618 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 618 | Run·the·following·command·to·generate·a·new·database: | 619 | Run·the·following·command·to·generate·a·new·database: |
| 619 | $·sudo·/usr/sbin/aide·--init | 620 | $·sudo·/usr/sbin/aide·--init |
| 620 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 621 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 621 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 622 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 622 | To·initiate·a·manual·check,·run·the·following·command: | 623 | To·initiate·a·manual·check,·run·the·following·command: |
| 623 | $·sudo·/usr/sbin/aide·--check | 624 | $·sudo·/usr/sbin/aide·--check |
| Offset 1300, 14 lines modified | Offset 1300, 18 lines modified | ||
| 1300 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1300 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1301 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1301 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1302 | ············_\x8i_\x8s_\x8m······1446 | 1302 | ············_\x8i_\x8s_\x8m······1446 |
| 1303 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1303 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1304 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1304 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1305 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1305 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1308 | [customizations] | ||
| 1309 | fips·=·true | ||
| 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1312 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1315 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1313 | ··set_fact: | 1316 | ··set_fact: |
| Offset 1403, 18 lines modified | Offset 1407, 14 lines modified | ||
| 1403 | ··-·NIST-800-53-SC-13 | 1407 | ··-·NIST-800-53-SC-13 |
| 1404 | ··-·enable_fips_mode | 1408 | ··-·enable_fips_mode |
| 1405 | ··-·high_severity | 1409 | ··-·high_severity |
| 1406 | ··-·medium_complexity | 1410 | ··-·medium_complexity |
| 1407 | ··-·medium_disruption | 1411 | ··-·medium_disruption |
| 1408 | ··-·reboot_required | 1412 | ··-·reboot_required |
| 1409 | ··-·restrict_strategy | 1413 | ··-·restrict_strategy |
| 1410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1411 | [customizations] | ||
| 1412 | fips·=·true | ||
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1414 | #·Remediation·is·applicable·only·in·certain·platforms | 1415 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1415 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 1416 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 1416 | var_system_crypto_policy='FIPS:OSPP' | 1417 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 2000, 14 lines modified | Offset 2000, 21 lines modified | ||
| 2000 | By·removing·the·gdm·package,·the·system·no·longer·has·GNOME·installed·installed.·If·X·Windows·is·not·installed·then·the·system·cannot·boot·into·graphical·user·mode.·This·prevents·the·system·from·being·accidentally·or·maliciously·booted·into·a·graphical.target·mode.·To·do·so,·run·the·following·command: | 2000 | By·removing·the·gdm·package,·the·system·no·longer·has·GNOME·installed·installed.·If·X·Windows·is·not·installed·then·the·system·cannot·boot·into·graphical·user·mode.·This·prevents·the·system·from·being·accidentally·or·maliciously·booted·into·a·graphical.target·mode.·To·do·so,·run·the·following·command: |
| 2001 | $·sudo·yum·remove·gdm | 2001 | $·sudo·yum·remove·gdm |
| 2002 | Rationale:··Unnecessary·service·packages·must·not·be·installed·to·decrease·the·attack·surface·of·the·system.·A·graphical·environment·is·unnecessary·for·certain·types·of·systems·including·a·virtualization·hypervisor. | 2002 | Rationale:··Unnecessary·service·packages·must·not·be·installed·to·decrease·the·attack·surface·of·the·system.·A·graphical·environment·is·unnecessary·for·certain·types·of·systems·including·a·virtualization·hypervisor. |
| 2003 | Severity: ··medium | 2003 | Severity: ··medium |
| Max diff block lines reached; 101019/107707 bytes (93.79%) of diff not shown. | |||
| Offset 14383, 16 lines modified | Offset 14383, 16 lines modified | ||
| 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038350:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038350:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038360:·313 | 00038360:·3131·2d30·3929·0a20·2020·2020·2020·2020··11-09).········· | ||
| 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17125, 256 lines modified | Offset 17125, 256 lines modified | ||
| 00042e40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00042e40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00042e50:·2223·6964·6d32·3339·3622·2074·6162·696e··"#idm2396"·tabin | 00042e50:·2223·6964·6d32·3339·3622·2074·6162·696e··"#idm2396"·tabin | ||
| 00042e60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00042e60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00042e70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00042e70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00042e80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00042e80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00042e90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00042e90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00042ea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00042ea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00042eb0:·3e52·656d·6564·6961·7469·6f6e·204 | 00042eb0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00042ec0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00042ed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00042ee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042ef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042f00:·6c61·7073·6522·2069·643d·2269·646d·3233··lapse"·id="idm23 | |||
| 00042f10:·3936·223e·3c70·7265·3e3c·636f·6465·3e0a··96"><pre><code>. | |||
| 00042f20:·5b63·7573·746f·6d69·7a61·7469·6f6e·735d··[customizations] | |||
| 00042f30:·0a66·6970·7320·3d20·7472·7565·0a3c·2f63··.fips·=·true.</c | |||
| 00042f40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00042f50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00042f60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00042f70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00042f80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00042f90:·6964·6d32·3339·3722·2074·6162·696e·6465··idm2397"·tabinde | |||
| 00042fa0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00042fb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00042fc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00042fd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00042fe0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00042ff0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0004 | 00043000:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0004 | 00043010:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004 | 00043020:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004 | 00043030:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004 | 00043040:·646d·3233·3937·223e·3c74·6162·6c65·2063··dm2397"><table·c | ||
| 0004 | 00043050:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004 | 00043060:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004 | 00043070:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004 | 00043080:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004 | 00043090:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004 | 000430a0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 000430b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000430c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000430d0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 000430e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000430f0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0004 | 00043100:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00042f80:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00042f90:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 00042fa0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00042fb0:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 00042fc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004 | 00043110:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0004 | 00043120:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0004 | 00043130:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 00043 | 00043140:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | ||
| 00043 | 00043150:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | ||
| 00043 | 00043160:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 00043 | 00043170:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 00043 | 00043180:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| 00043 | 00043190:·6661·6374·3a0a·2020·2020·7661·725f·7379··fact:.····var_sy | ||
| 00043 | 000431a0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00043 | 000431b0:·6379·3a20·2121·7374·7220·3c61·6262·7220··cy:·!!str·<abbr· | ||
| 00043 | 000431c0:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | ||
| 00043 | 000431d0:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | ||
| 00043 | 000431e0:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | ||
| 00043 | 000431f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | ||
| 00043 | 00043200:·616c·7565·5f76·6172·5f73·7973·7465·6d5f··alue_var_system_ | ||
| 00043 | 00043210:·6372·7970·746f·5f70·6f6c·6963·7922·3e46··crypto_policy">F | ||
| 00043 | 00043220:·4950·533a·4f53·5050·3c2f·6162·6272·3e0a··IPS:OSPP</abbr>. | ||
| 00043 | 00043230:·2020·7461·6773·3a0a·2020·2020·2d20·616c····tags:.····-·al | ||
| 00043 | 00043240:·7761·7973·0a0a·2d20·6e61·6d65·3a20·456e··ways..-·name:·En | ||
| 00043 | 00043250:·6162·6c65·2046·4950·5320·4d6f·6465·202d··able·FIPS·Mode·- | ||
| 00043 | 00043260:·2043·6865·636b·2074·6f20·5365·6520·7468···Check·to·See·th | ||
| 00043 | 00043270:·6520·4375·7272·656e·7420·5374·6174·7573··e·Current·Status | ||
| 00043 | 00043280:·206f·6620·4649·5053·204d·6f64·650a·2020···of·FIPS·Mode.·· | ||
| 00043 | 00043290:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | ||
| 00043 | 000432a0:·636f·6d6d·616e·643a·202f·7573·722f·6269··command:·/usr/bi | ||
| 00043 | 000432b0:·6e2f·6669·7073·2d6d·6f64·652d·7365·7475··n/fips-mode-setu | ||
| 00043 | 000432c0:·7020·2d2d·6368·6563·6b0a·2020·7265·6769··p·--check.··regi | ||
| 00043 | 000432d0:·7374·6572·3a20·6973·5f66·6970·735f·656e··ster:·is_fips_en | ||
| 00043 | 000432e0:·6162·6c65·640a·2020·6661·696c·6564·5f77··abled.··failed_w | ||
| 00043 | 000432f0:·6865·6e3a·2066·616c·7365·0a20·2063·6861··hen:·false.··cha | ||
| 00043 | 00043300:·6e67·6564·5f77·6865·6e3a·2066·616c·7365··nged_when:·false | ||
| 00043 | 00043310:·0a20·2077·6865·6e3a·0a20·202d·2028·2061··.··when:.··-·(·a | ||
| 00043 | 00043320:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 00043 | 00043330:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 00043200:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00043210:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00043220:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00043230:·696e·6572·225d·0a20·2020·2061·6e64·206e··iner"].····and·n | |||
| 00043240:·6f74·2028·206c·6f6f·6b75·7028·2265·6e76··ot·(·lookup("env | |||
| 00043250:·222c·2022·636f·6e74·6169·6e65·7222·2920··",·"container")· | |||
| 00043260:·3d3d·2022·6277·7261·702d·6f73·6275·696c··==·"bwrap-osbuil | |||
| 00043270:·6422·2029·2029·0a20·202d·2061·6e73·6962··d"·)·).··-·ansib | |||
| 00043280:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 00043290:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000432a0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000432b0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000432c0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000432d0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 000432e0:·542d·3830·302d·3533·2d43·4d2d·3328·3629··T-800-53-CM-3(6) | |||
| 000432f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00043300:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 00043310:·542d·3830·302d·3533·2d49·412d·370a·2020··T-800-53-IA-7.·· | |||
| 00043320:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 00043330:·2d31·320a·2020·2d20·4e49·5354·2d38·3030··-12.··-·NIST-800 | |||
| 00043340:·2d35·332d·5343·2d31·3228·3229·0a20·202d··-53-SC-12(2).··- | |||
| 00043350:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 00043360:·3132·2833·290a·2020·2d20·4e49·5354·2d38··12(3).··-·NIST-8 | |||
| 00043370:·3030·2d35·332d·5343·2d31·330a·2020·2d20··00-53-SC-13.··-· | |||
| 00043380:·656e·6162·6c65·5f66·6970·735f·6d6f·6465··enable_fips_mode | |||
| Max diff block lines reached; 236870/272114 bytes (87.05%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | ··············Virtualization·Host·(RHVH) | 59 | ··············Virtualization·Host·(RHVH) |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 566, 14 lines modified | Offset 566, 18 lines modified | ||
| 566 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 566 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 567 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 567 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 568 | ············_\x8i_\x8s_\x8m······1446 | 568 | ············_\x8i_\x8s_\x8m······1446 |
| 569 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 569 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 570 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 571 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 571 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 574 | [customizations] | ||
| 575 | fips·=·true | ||
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 578 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 581 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 579 | ··set_fact: | 582 | ··set_fact: |
| Offset 669, 18 lines modified | Offset 673, 14 lines modified | ||
| 669 | ··-·NIST-800-53-SC-13 | 673 | ··-·NIST-800-53-SC-13 |
| 670 | ··-·enable_fips_mode | 674 | ··-·enable_fips_mode |
| 671 | ··-·high_severity | 675 | ··-·high_severity |
| 672 | ··-·medium_complexity | 676 | ··-·medium_complexity |
| 673 | ··-·medium_disruption | 677 | ··-·medium_disruption |
| 674 | ··-·reboot_required | 678 | ··-·reboot_required |
| 675 | ··-·restrict_strategy | 679 | ··-·restrict_strategy |
| 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 677 | [customizations] | ||
| 678 | fips·=·true | ||
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 680 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 680 | #·Remediation·is·applicable·only·in·certain·platforms | 681 | #·Remediation·is·applicable·only·in·certain·platforms |
| 681 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 682 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 682 | var_system_crypto_policy='FIPS:OSPP' | 683 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 8369, 14 lines modified | Offset 8369, 26 lines modified | ||
| 8369 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. | 8369 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. |
| 8370 | Severity: ··medium | 8370 | Severity: ··medium |
| 8371 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed | 8371 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed |
| 8372 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 | 8372 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 |
| 8373 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 8373 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 8374 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8374 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8375 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 | 8375 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 |
| 8376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8377 | [[packages]] | ||
| 8378 | name·=·"opensc" | ||
| 8379 | version·=·"*" | ||
| 8380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8385 | package·--add=opensc | ||
| 8376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8381 | -·name:·Ensure·opensc·is·installed | 8391 | -·name:·Ensure·opensc·is·installed |
| 8382 | ··package: | 8392 | ··package: |
| Offset 8387, 19 lines modified | Offset 8399, 14 lines modified | ||
| 8387 | ··-·NIST-800-53-CM-6(a) | 8399 | ··-·NIST-800-53-CM-6(a) |
| 8388 | ··-·enable_strategy | 8400 | ··-·enable_strategy |
| 8389 | ··-·low_complexity | 8401 | ··-·low_complexity |
| 8390 | ··-·low_disruption | 8402 | ··-·low_disruption |
| 8391 | ··-·medium_severity | 8403 | ··-·medium_severity |
| 8392 | ··-·no_reboot_needed | 8404 | ··-·no_reboot_needed |
| 8393 | ··-·package_opensc_installed | 8405 | ··-·package_opensc_installed |
| 8394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8395 | [[packages]] | ||
| 8396 | name·=·"opensc" | ||
| 8397 | version·=·"*" | ||
| 8398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8399 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8400 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8401 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8402 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8403 | #·Remediation·is·applicable·only·in·certain·platforms | 8411 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8404 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 8412 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8419, 31 lines modified | Offset 8426, 36 lines modified | ||
| 8419 | include·install_opensc | 8426 | include·install_opensc |
| 8420 | class·install_opensc·{ | 8427 | class·install_opensc·{ |
| 8421 | ··package·{·'opensc': | 8428 | ··package·{·'opensc': |
| 8422 | ····ensure·=>·'installed', | 8429 | ····ensure·=>·'installed', |
| 8423 | ··} | 8430 | ··} |
| 8424 | } | 8431 | } |
| 8425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8430 | package·--add=opensc | ||
| 8431 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·p\x8pc\x8cs\x8sc\x8c-\x8-l\x8li\x8it\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 8432 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·p\x8pc\x8cs\x8sc\x8c-\x8-l\x8li\x8it\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 8432 | The·pcsc-lite·package·can·be·installed·with·the·following·command: | 8433 | The·pcsc-lite·package·can·be·installed·with·the·following·command: |
| 8433 | $·sudo·yum·install·pcsc-lite | 8434 | $·sudo·yum·install·pcsc-lite |
| 8434 | Rationale:··The·pcsc-lite·package·must·be·installed·if·it·is·to·be·available·for·multifactor·authentication·using·smartcards. | 8435 | Rationale:··The·pcsc-lite·package·must·be·installed·if·it·is·to·be·available·for·multifactor·authentication·using·smartcards. |
| 8435 | Severity: ··medium | 8436 | Severity: ··medium |
| 8436 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pcsc-lite_installed | 8437 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pcsc-lite_installed |
| 8437 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 8438 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 8438 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 8439 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 8439 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8440 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 8441 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 8442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 31451/37974 bytes (82.82%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 83 lines modified | Offset 15134, 83 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b250:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b270:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b280:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b290:·3d22·6964·6d35·3338·3922·3e3c·7072·653e··="idm5389"><pre> | |||
| 0003b2a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2b0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2c0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b240:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b250:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b260:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b270:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b280:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b290:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b300:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b330:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b340:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b350:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b360:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b370:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b380:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b390:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3a0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3b0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3c0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3d0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b3f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b400:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b410:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b420:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b430:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b440:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b470:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003b2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003b2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003b300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003b310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003b320:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | ||
| 0003b | 0003b330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003b340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003b350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5d | 0003b360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003b370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b5f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b600:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b610:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b620:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b630:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b640:·7365·2220·6964·3d22·6964·6d35·3339·3022··se"·id="idm5390" | |||
| 0003b650:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b660:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b | 0003b380:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b390:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b3a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3d0:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 0003b3e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b400:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b410:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b420:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b430:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b440:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b450:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b460:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b470:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b480:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b490:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b4a0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4b0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4c0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4d0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4e0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4f0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b500:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b510:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b520:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b530:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| Max diff block lines reached; 364922/376152 bytes (97.01%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 553, 14 lines modified | Offset 553, 19 lines modified | ||
| 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 565 | -·name:·Ensure·sudo·is·installed | 569 | -·name:·Ensure·sudo·is·installed |
| 566 | ··package: | 570 | ··package: |
| Offset 573, 19 lines modified | Offset 578, 14 lines modified | ||
| 573 | ··-·PCI-DSSv4-2.2.6 | 578 | ··-·PCI-DSSv4-2.2.6 |
| 574 | ··-·enable_strategy | 579 | ··-·enable_strategy |
| 575 | ··-·low_complexity | 580 | ··-·low_complexity |
| 576 | ··-·low_disruption | 581 | ··-·low_disruption |
| 577 | ··-·medium_severity | 582 | ··-·medium_severity |
| 578 | ··-·no_reboot_needed | 583 | ··-·no_reboot_needed |
| 579 | ··-·package_sudo_installed | 584 | ··-·package_sudo_installed |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | [[packages]] | ||
| 582 | name·=·"sudo" | ||
| 583 | version·=·"*" | ||
| 584 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 585 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 586 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 587 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 588 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 589 | #·Remediation·is·applicable·only·in·certain·platforms | 590 | #·Remediation·is·applicable·only·in·certain·platforms |
| 590 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 591 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1392, 14 lines modified | Offset 1392, 19 lines modified | ||
| 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1393 | ·············automatic,·regular·execution. | 1393 | ·············automatic,·regular·execution. |
| 1394 | Severity: ···medium | 1394 | Severity: ···medium |
| 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1396 | Identifiers:·CCE-91476-2 | 1396 | Identifiers:·CCE-91476-2 |
| 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1400 | [[packages]] | ||
| 1401 | name·=·"dnf-automatic" | ||
| 1402 | version·=·"*" | ||
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1404 | -·name:·Ensure·dnf-automatic·is·installed | 1408 | -·name:·Ensure·dnf-automatic·is·installed |
| 1405 | ··package: | 1409 | ··package: |
| Offset 1409, 19 lines modified | Offset 1414, 14 lines modified | ||
| 1409 | ··-·CCE-91476-2 | 1414 | ··-·CCE-91476-2 |
| 1410 | ··-·enable_strategy | 1415 | ··-·enable_strategy |
| 1411 | ··-·low_complexity | 1416 | ··-·low_complexity |
| 1412 | ··-·low_disruption | 1417 | ··-·low_disruption |
| 1413 | ··-·medium_severity | 1418 | ··-·medium_severity |
| 1414 | ··-·no_reboot_needed | 1419 | ··-·no_reboot_needed |
| 1415 | ··-·package_dnf-automatic_installed | 1420 | ··-·package_dnf-automatic_installed |
| 1416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1417 | [[packages]] | ||
| 1418 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 24365/29723 bytes (81.97%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 83 lines modified | Offset 15139, 83 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·204 | 0003b290:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b2a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2e0:·2069·643d·2269·646d·3533·3839·223e·3c70···id="idm5389"><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b300:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b310:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b2e0:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b300:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b310:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b360:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b370:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b380:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b390:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b3a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b3b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b3c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b3d0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b3e0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b3f0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b400:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b410:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b420:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b430:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b440:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b450:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b460:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b470:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b480:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b490:·2020·2d20·4343·452d·3833·3036·372d·390a····-·CCE-83067-9. | |||
| 0003b4a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b4b0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b4c0:·534c·4553·2d31·322d·3031·3034·3939·0a20··SLES-12-010499.· | |||
| 0003b4d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b4e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b4f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b500:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b510:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b520:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b530:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b540:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b550:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b560:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b570:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b580:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b | 0003b320:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b330:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b340:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b5 | 0003b350:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b360:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b370:·6765·743d·2223·6964·6d35·3339·3022·2074··get="#idm5390"·t | ||
| 0003b | 0003b380:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b | 0003b390:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b61 | 0003b3a0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b | 0003b3b0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b6 | 0003b3c0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b | 0003b3d0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b650:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b660:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b670:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b680:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b690:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b6a0:·3930·223e·3c70·7265·3e3c·636f·6465·3e0a··90"><pre><code>. | |||
| 0003b6b0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b6c0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b | 0003b3e0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b3f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b400:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b410:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b420:·2069·643d·2269·646d·3533·3930·223e·3c74···id="idm5390"><t | |||
| 0003b430:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b440:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b450:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b460:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b470:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b480:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b490:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b4b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b4c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b500:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b510:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b520:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b530:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b540:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b550:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b560:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b570:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b580:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b590:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| Max diff block lines reached; 364922/376152 bytes (97.01%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 126 | ·············_\x8c_\x8i_\x8s············1.4.1 | 126 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 146, 19 lines modified | Offset 151, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1293, 14 lines modified | Offset 1293, 19 lines modified | ||
| 1293 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1293 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1294 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1294 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1295 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1295 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1296 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1296 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1297 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1297 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1298 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1298 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1301 | [[packages]] | ||
| 1302 | name·=·"sudo" | ||
| 1303 | version·=·"*" | ||
| 1300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1305 | -·name:·Ensure·sudo·is·installed | 1309 | -·name:·Ensure·sudo·is·installed |
| 1306 | ··package: | 1310 | ··package: |
| Offset 1313, 19 lines modified | Offset 1318, 14 lines modified | ||
| 1313 | ··-·PCI-DSSv4-2.2.6 | 1318 | ··-·PCI-DSSv4-2.2.6 |
| 1314 | ··-·enable_strategy | 1319 | ··-·enable_strategy |
| 1315 | ··-·low_complexity | 1320 | ··-·low_complexity |
| 1316 | ··-·low_disruption | 1321 | ··-·low_disruption |
| 1317 | ··-·medium_severity | 1322 | ··-·medium_severity |
| 1318 | ··-·no_reboot_needed | 1323 | ··-·no_reboot_needed |
| 1319 | ··-·package_sudo_installed | 1324 | ··-·package_sudo_installed |
| 1320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1321 | [[packages]] | ||
| 1322 | name·=·"sudo" | ||
| 1323 | version·=·"*" | ||
| 1324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1329 | #·Remediation·is·applicable·only·in·certain·platforms | 1330 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1330 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1331 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2132, 14 lines modified | Offset 2132, 19 lines modified | ||
| 2132 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 2132 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 2133 | ·············automatic,·regular·execution. | 2133 | ·············automatic,·regular·execution. |
| 2134 | Severity: ···medium | 2134 | Severity: ···medium |
| 2135 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 2135 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 2136 | Identifiers:·CCE-91476-2 | 2136 | Identifiers:·CCE-91476-2 |
| 2137 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 2137 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 2138 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 2138 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 2139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2140 | [[packages]] | ||
| 2141 | name·=·"dnf-automatic" | ||
| 2142 | version·=·"*" | ||
| 2139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2144 | -·name:·Ensure·dnf-automatic·is·installed | 2148 | -·name:·Ensure·dnf-automatic·is·installed |
| 2145 | ··package: | 2149 | ··package: |
| Offset 2149, 19 lines modified | Offset 2154, 14 lines modified | ||
| 2149 | ··-·CCE-91476-2 | 2154 | ··-·CCE-91476-2 |
| 2150 | ··-·enable_strategy | 2155 | ··-·enable_strategy |
| 2151 | ··-·low_complexity | 2156 | ··-·low_complexity |
| 2152 | ··-·low_disruption | 2157 | ··-·low_disruption |
| 2153 | ··-·medium_severity | 2158 | ··-·medium_severity |
| 2154 | ··-·no_reboot_needed | 2159 | ··-·no_reboot_needed |
| 2155 | ··-·package_dnf-automatic_installed | 2160 | ··-·package_dnf-automatic_installed |
| 2156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2157 | [[packages]] | ||
| 2158 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 24365/29731 bytes (81.95%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 83 lines modified | Offset 15125, 83 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | ||
| 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b230:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b | 0003b1b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b1c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b1d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b200:·643d·2269·646d·3533·3839·223e·3c70·7265··d="idm5389"><pre | |||
| 0003b210:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b220:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b230:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b240:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b250:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b260:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b270:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b290:·743d·2223·6964·6d35·3339·3022·2074·6162··t="#idm5390"·tab | |||
| 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b300:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3533·3930·223e·3c74·6162··d="idm5390"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b450:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b460:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b470:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b480:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b490:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b4a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b4b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b4c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b4d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b4e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b4f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b500:·3833·3036·372d·390a·2020·2d20·434a·4953··83067-9.··-·CJIS | |||
| 0003b510:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b520:·5341·2d53·5449·472d·534c·4553·2d31·322d··SA-STIG-SLES-12- | |||
| 0003b530:·3031·3034·3939·0a20·202d·204e·4953·542d··010499.··-·NIST- | |||
| 0003b540:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b550:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b560:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b570:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b580:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b590:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b5a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b5b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b5c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b5d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b5e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b300:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b310:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b320:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b330:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b340:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b350:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b360:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b370:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b380:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b390:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b3a0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b3b0:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b3c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b3e0:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b3f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| Max diff block lines reached; 269930/281160 bytes (96.01%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 533, 14 lines modified | Offset 533, 19 lines modified | ||
| 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 541 | [[packages]] | ||
| 542 | name·=·"sudo" | ||
| 543 | version·=·"*" | ||
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 545 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 546 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 547 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 548 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 545 | -·name:·Ensure·sudo·is·installed | 549 | -·name:·Ensure·sudo·is·installed |
| 546 | ··package: | 550 | ··package: |
| Offset 553, 19 lines modified | Offset 558, 14 lines modified | ||
| 553 | ··-·PCI-DSSv4-2.2.6 | 558 | ··-·PCI-DSSv4-2.2.6 |
| 554 | ··-·enable_strategy | 559 | ··-·enable_strategy |
| 555 | ··-·low_complexity | 560 | ··-·low_complexity |
| 556 | ··-·low_disruption | 561 | ··-·low_disruption |
| 557 | ··-·medium_severity | 562 | ··-·medium_severity |
| 558 | ··-·no_reboot_needed | 563 | ··-·no_reboot_needed |
| 559 | ··-·package_sudo_installed | 564 | ··-·package_sudo_installed |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 565 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 566 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 567 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 568 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 569 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 569 | #·Remediation·is·applicable·only·in·certain·platforms | 570 | #·Remediation·is·applicable·only·in·certain·platforms |
| 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 571 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1302, 14 lines modified | Offset 1302, 19 lines modified | ||
| 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1303 | ·············automatic,·regular·execution. | 1303 | ·············automatic,·regular·execution. |
| 1304 | Severity: ···medium | 1304 | Severity: ···medium |
| 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1306 | Identifiers:·CCE-91476-2 | 1306 | Identifiers:·CCE-91476-2 |
| 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1310 | [[packages]] | ||
| 1311 | name·=·"dnf-automatic" | ||
| 1312 | version·=·"*" | ||
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1314 | -·name:·Ensure·dnf-automatic·is·installed | 1318 | -·name:·Ensure·dnf-automatic·is·installed |
| 1315 | ··package: | 1319 | ··package: |
| Offset 1319, 19 lines modified | Offset 1324, 14 lines modified | ||
| 1319 | ··-·CCE-91476-2 | 1324 | ··-·CCE-91476-2 |
| 1320 | ··-·enable_strategy | 1325 | ··-·enable_strategy |
| 1321 | ··-·low_complexity | 1326 | ··-·low_complexity |
| 1322 | ··-·low_disruption | 1327 | ··-·low_disruption |
| 1323 | ··-·medium_severity | 1328 | ··-·medium_severity |
| 1324 | ··-·no_reboot_needed | 1329 | ··-·no_reboot_needed |
| 1325 | ··-·package_dnf-automatic_installed | 1330 | ··-·package_dnf-automatic_installed |
| 1326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1327 | [[packages]] | ||
| 1328 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 13332/18809 bytes (70.88%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 72 lines modified | Offset 14793, 72 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | ||
| 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039d00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039d10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039d20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039d30:·7073·6522·2069·643d·2269·646d·3831·3330··pse"·id="idm8130 | |||
| 00039d40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039d50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039d60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039d70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039d80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039d90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039da0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039db0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039dc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039dd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039de0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039df0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039e10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039e30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039e40:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039e50:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 00039e60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00039e70:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039e80:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039e90:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039ea0:·3a0a·2020·2d20·4343·452d·3931·3437·362d··:.··-·CCE-91476- | |||
| 00039eb0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00039ec0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039ed0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039ee0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039ef0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039f00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039f10:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039f20:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 00039f30:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00039f40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f80:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00039f90:·3133·3122·2074·6162·696e·6465·783d·2230··131"·tabindex="0 | |||
| 00039fa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039fb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039fc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039cf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003 | 00039d00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 0003 | 00039d10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003 | 00039d20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003 | 00039d30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003 | 00039d40:·643d·2269·646d·3831·3330·223e·3c70·7265··d="idm8130"><pre | ||
| 0003 | 00039d50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003 | 00039d60:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | ||
| 0003 | 00039d70:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | ||
| 0003 | 00039d80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | ||
| 00039d90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039da0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039db0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039dc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039dd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039de0:·3831·3331·2220·7461·6269·6e64·6578·3d22··8131"·tabindex=" | |||
| 00039df0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00039e00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00039e10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00039e20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00039e30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00039e40:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00039e50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039e60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039e70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039e80:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00039e90:·3133·3122·3e3c·7461·626c·6520·636c·6173··131"><table·clas | |||
| 00039ea0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039eb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039ec0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039ed0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039ee0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039ef0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039f00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039f10:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039f20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039f30:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039f40:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039f50:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039f60:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039f70:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039f80:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00039f90:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 00039fa0:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 00039fb0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 00039fc0:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 00039fd0:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 00039fe0:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 00039ff0:·6167·733a·0a20·202d·2043·4345·2d39·3134··ags:.··-·CCE-914 | |||
| 0003a000:·3736·2d32·0a20·202d·2065·6e61·626c·655f··76-2.··-·enable_ | |||
| 0003a010:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003a020:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003a030:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003a040:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003a050:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003a060:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| Max diff block lines reached; 414/10126 bytes (4.09%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 14 lines modified | Offset 87, 19 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | [[packages]] | ||
| 96 | name·=·"dnf-automatic" | ||
| 97 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | -·name:·Ensure·dnf-automatic·is·installed | 103 | -·name:·Ensure·dnf-automatic·is·installed |
| 100 | ··package: | 104 | ··package: |
| Offset 104, 19 lines modified | Offset 109, 14 lines modified | ||
| 104 | ··-·CCE-91476-2 | 109 | ··-·CCE-91476-2 |
| 105 | ··-·enable_strategy | 110 | ··-·enable_strategy |
| 106 | ··-·low_complexity | 111 | ··-·low_complexity |
| 107 | ··-·low_disruption | 112 | ··-·low_disruption |
| 108 | ··-·medium_severity | 113 | ··-·medium_severity |
| 109 | ··-·no_reboot_needed | 114 | ··-·no_reboot_needed |
| 110 | ··-·package_dnf-automatic_installed | 115 | ··-·package_dnf-automatic_installed |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"dnf-automatic" | ||
| 114 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | zypper·install·-y·"dnf-automatic" | 121 | zypper·install·-y·"dnf-automatic" |
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 83 lines modified | Offset 15171, 83 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b4a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4e0:·6964·3d22·6964·6d35·3338·3922·3e3c·7072··id="idm5389"><pr | |||
| 0003b4f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b500:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b510:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b490:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b4a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4d0:·6170·7365·2220·6964·3d22·6964·6d35·3338··apse"·id="idm538 | |||
| 0003b4e0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b4f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b500:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b510:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b520:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b530:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b560:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b570:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b580:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b590:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b5b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b5e0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b5f0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b600:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b610:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b620:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b630:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b640:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b650:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b660:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b670:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b680:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b690:·202d·2043·4345·2d38·3330·3637·2d39·0a20···-·CCE-83067-9.· | |||
| 0003b6a0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6b0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b6c0:·4c45·532d·3132·2d30·3130·3439·390a·2020··LES-12-010499.·· | |||
| 0003b6d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b6e0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b6f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b700:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b710:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b720:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b730:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b740:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b750:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b760:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b770:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b780:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b520:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b530:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b7 | 0003b540:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b550:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b560:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b570:·6574·3d22·2369·646d·3533·3930·2220·7461··et="#idm5390"·ta | ||
| 0003b | 0003b580:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b590:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b5a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b5b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b5c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b5d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b850:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b860:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b870:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b880:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b890:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b8a0:·3022·3e3c·7072·653e·3c63·6f64·653e·0a5b··0"><pre><code>.[ | |||
| 0003b8b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b8c0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b | 0003b5e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d35·3339·3022·3e3c·7461··id="idm5390"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b700:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b710:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b720:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b730:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b740:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b750:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b760:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b770:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b780:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| Max diff block lines reached; 697570/708800 bytes (98.42%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 128, 14 lines modified | Offset 128, 19 lines modified | ||
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 131 | ·············_\x8c_\x8i_\x8s············1.4.1 | 131 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 141 | ··package: | 145 | ··package: |
| Offset 151, 19 lines modified | Offset 156, 14 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 158 | ··-·low_complexity |
| 154 | ··-·low_disruption | 159 | ··-·low_disruption |
| 155 | ··-·medium_severity | 160 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1156, 14 lines modified | Offset 1156, 19 lines modified | ||
| 1156 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1156 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1157 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1157 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1158 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1158 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1159 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1159 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1160 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1160 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1161 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1161 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1162 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1162 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1164 | [[packages]] | ||
| 1165 | name·=·"sudo" | ||
| 1166 | version·=·"*" | ||
| 1163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1168 | -·name:·Ensure·sudo·is·installed | 1172 | -·name:·Ensure·sudo·is·installed |
| 1169 | ··package: | 1173 | ··package: |
| Offset 1176, 19 lines modified | Offset 1181, 14 lines modified | ||
| 1176 | ··-·PCI-DSSv4-2.2.6 | 1181 | ··-·PCI-DSSv4-2.2.6 |
| 1177 | ··-·enable_strategy | 1182 | ··-·enable_strategy |
| 1178 | ··-·low_complexity | 1183 | ··-·low_complexity |
| 1179 | ··-·low_disruption | 1184 | ··-·low_disruption |
| 1180 | ··-·medium_severity | 1185 | ··-·medium_severity |
| 1181 | ··-·no_reboot_needed | 1186 | ··-·no_reboot_needed |
| 1182 | ··-·package_sudo_installed | 1187 | ··-·package_sudo_installed |
| 1183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1184 | [[packages]] | ||
| 1185 | name·=·"sudo" | ||
| 1186 | version·=·"*" | ||
| 1187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1192 | #·Remediation·is·applicable·only·in·certain·platforms | 1193 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1193 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1194 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9504, 14 lines modified | Offset 9504, 19 lines modified | ||
| 9504 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9504 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9505 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9505 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9506 | ·····················00232 | 9506 | ·····················00232 |
| 9507 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9507 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9508 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9508 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9509 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9509 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9510 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9510 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9512 | [[packages]] | ||
| 9513 | name·=·"pam_apparmor" | ||
| 9514 | version·=·"*" | ||
| 9511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9516 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9517 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9518 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9519 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9516 | -·name:·Ensure·pam_apparmor·is·installed | 9520 | -·name:·Ensure·pam_apparmor·is·installed |
| 9517 | ··package: | 9521 | ··package: |
| Offset 9530, 19 lines modified | Offset 9535, 14 lines modified | ||
| 9530 | ··-·NIST-800-53-SC-7(21) | 9535 | ··-·NIST-800-53-SC-7(21) |
| 9531 | ··-·enable_strategy | 9536 | ··-·enable_strategy |
| 9532 | ··-·low_complexity | 9537 | ··-·low_complexity |
| 9533 | ··-·low_disruption | 9538 | ··-·low_disruption |
| 9534 | ··-·medium_severity | 9539 | ··-·medium_severity |
| 9535 | ··-·no_reboot_needed | 9540 | ··-·no_reboot_needed |
| 9536 | ··-·package_pam_apparmor_installed | 9541 | ··-·package_pam_apparmor_installed |
| 9537 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9538 | [[packages]] | ||
| 9539 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 52982/58435 bytes (90.67%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037ef0:·3 | 00037ef0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 83 lines modified | Offset 15149, 83 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·204 | 0003b330:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b380:·3533·3839·223e·3c74·6162·6c65·2063·6c61··5389"><table·cla | |||
| 0003b390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b340:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3533·3839·223e··e"·id="idm5389"> | |||
| 0003b390:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b3a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b3b0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b3c0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b3d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3e0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3f0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b400:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b410:·6172·6765·743d·2223·6964·6d35·3339·3022··arget="#idm5390" | |||
| 0003b420:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b430:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b440:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b450:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b460:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b470:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b480:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4c0:·6522·2069·643d·2269·646d·3533·3930·223e··e"·id="idm5390"> | |||
| 0003b4d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b4f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b500:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b510:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b530:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b540:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b550:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b560:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b570:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b | 0003b580:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b590:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b5a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b5d0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b5e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b5f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b600:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b610:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b620:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b630:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b640:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b650:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b660:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b670:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b680:·4343·452d·3833·3036·372d·390a·2020·2d20··CCE-83067-9.··-· | |||
| 0003b690:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b6a0:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b6b0:·2d31·322d·3031·3034·3939·0a20·202d·204e··-12-010499.··-·N | |||
| 0003b6c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b6e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b6f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b700:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b710:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b720:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b730:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b740:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b750:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b760:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b770:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b480:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b490:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b4a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b500:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b510:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b520:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b530:·3a0a·2020·2d20·4343·452d·3833·3036·372d··:.··-·CCE-83067- | |||
| 0003b540:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b550:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b560:·472d·534c·4553·2d31·322d·3031·3034·3939··G-SLES-12-010499 | |||
| 0003b570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| Max diff block lines reached; 535658/547026 bytes (97.92%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 19 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 142 | ··package: |
| Offset 148, 19 lines modified | Offset 153, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 155 | ··-·low_complexity |
| 151 | ··-·low_disruption | 156 | ··-·low_disruption |
| 152 | ··-·medium_severity | 157 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 165 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1046, 14 lines modified | Offset 1046, 19 lines modified | ||
| 1046 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1046 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1047 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1047 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1048 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1048 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1049 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1049 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1050 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1050 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1051 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1051 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1052 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1052 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1053 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1054 | [[packages]] | ||
| 1055 | name·=·"sudo" | ||
| 1056 | version·=·"*" | ||
| 1053 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1057 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1054 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1058 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1055 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1059 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1056 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1060 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1057 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1061 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1058 | -·name:·Ensure·sudo·is·installed | 1062 | -·name:·Ensure·sudo·is·installed |
| 1059 | ··package: | 1063 | ··package: |
| Offset 1066, 19 lines modified | Offset 1071, 14 lines modified | ||
| 1066 | ··-·PCI-DSSv4-2.2.6 | 1071 | ··-·PCI-DSSv4-2.2.6 |
| 1067 | ··-·enable_strategy | 1072 | ··-·enable_strategy |
| 1068 | ··-·low_complexity | 1073 | ··-·low_complexity |
| 1069 | ··-·low_disruption | 1074 | ··-·low_disruption |
| 1070 | ··-·medium_severity | 1075 | ··-·medium_severity |
| 1071 | ··-·no_reboot_needed | 1076 | ··-·no_reboot_needed |
| 1072 | ··-·package_sudo_installed | 1077 | ··-·package_sudo_installed |
| 1073 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1074 | [[packages]] | ||
| 1075 | name·=·"sudo" | ||
| 1076 | version·=·"*" | ||
| 1077 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1078 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1078 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1079 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1079 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1080 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1080 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1081 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1081 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1082 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1082 | #·Remediation·is·applicable·only·in·certain·platforms | 1083 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1083 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1084 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9394, 14 lines modified | Offset 9394, 19 lines modified | ||
| 9394 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9394 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9395 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9395 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9396 | ·····················00232 | 9396 | ·····················00232 |
| 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9398 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9398 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9399 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9399 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9402 | [[packages]] | ||
| 9403 | name·=·"pam_apparmor" | ||
| 9404 | version·=·"*" | ||
| 9401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9402 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9403 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9404 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9408 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9405 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9409 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9406 | -·name:·Ensure·pam_apparmor·is·installed | 9410 | -·name:·Ensure·pam_apparmor·is·installed |
| 9407 | ··package: | 9411 | ··package: |
| Offset 9420, 19 lines modified | Offset 9425, 14 lines modified | ||
| 9420 | ··-·NIST-800-53-SC-7(21) | 9425 | ··-·NIST-800-53-SC-7(21) |
| 9421 | ··-·enable_strategy | 9426 | ··-·enable_strategy |
| 9422 | ··-·low_complexity | 9427 | ··-·low_complexity |
| 9423 | ··-·low_disruption | 9428 | ··-·low_disruption |
| 9424 | ··-·medium_severity | 9429 | ··-·medium_severity |
| 9425 | ··-·no_reboot_needed | 9430 | ··-·no_reboot_needed |
| 9426 | ··-·package_pam_apparmor_installed | 9431 | ··-·package_pam_apparmor_installed |
| 9427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9428 | [[packages]] | ||
| 9429 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 42538/48001 bytes (88.62%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037f00:·2d31·3 | 00037f00:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 83 lines modified | Offset 15135, 83 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·204 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3533·3839·223e·3c74·6162·6c65·2063··dm5389"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b | 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2a0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b330:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b340:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b3b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3e0:·7073·6522·2069·643d·2269·646d·3533·3930··pse"·id="idm5390 | |||
| 0003b3f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b400:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b410:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b420:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b430:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b440:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b450:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b460:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b470:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b490:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b4a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b4b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b4c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b4d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b4e0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b4f0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b500:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b510:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b520:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b530:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b540:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b550:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b560:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b570:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b580:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b590:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b5a0:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b5b0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b5c0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b5d0:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b5e0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b5f0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b600:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b610:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b620:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b630:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b640:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b650:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b660:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b670:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b680:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b690:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3833·3036··gs:.··-·CCE-8306 | |||
| 0003b460:·372d·390a·2020·2d20·434a·4953·2d35·2e31··7-9.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b480:·5449·472d·534c·4553·2d31·322d·3031·3034··TIG-SLES-12-0104 | |||
| 0003b490:·3939·0a20·202d·204e·4953·542d·3830·302d··99.··-·NIST-800- | |||
| Max diff block lines reached; 433974/445342 bytes (97.45%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1043, 14 lines modified | Offset 1043, 19 lines modified | ||
| 1043 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1043 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1044 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1044 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1045 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1045 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1046 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1046 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1047 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1047 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1048 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1048 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1049 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1049 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1051 | [[packages]] | ||
| 1052 | name·=·"sudo" | ||
| 1053 | version·=·"*" | ||
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1054 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1055 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1056 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1057 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1058 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1055 | -·name:·Ensure·sudo·is·installed | 1059 | -·name:·Ensure·sudo·is·installed |
| 1056 | ··package: | 1060 | ··package: |
| Offset 1063, 19 lines modified | Offset 1068, 14 lines modified | ||
| 1063 | ··-·PCI-DSSv4-2.2.6 | 1068 | ··-·PCI-DSSv4-2.2.6 |
| 1064 | ··-·enable_strategy | 1069 | ··-·enable_strategy |
| 1065 | ··-·low_complexity | 1070 | ··-·low_complexity |
| 1066 | ··-·low_disruption | 1071 | ··-·low_disruption |
| 1067 | ··-·medium_severity | 1072 | ··-·medium_severity |
| 1068 | ··-·no_reboot_needed | 1073 | ··-·no_reboot_needed |
| 1069 | ··-·package_sudo_installed | 1074 | ··-·package_sudo_installed |
| 1070 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1071 | [[packages]] | ||
| 1072 | name·=·"sudo" | ||
| 1073 | version·=·"*" | ||
| 1074 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1075 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1075 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1076 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1076 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1077 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1077 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1078 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1078 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1079 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1079 | #·Remediation·is·applicable·only·in·certain·platforms | 1080 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1080 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1081 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9391, 14 lines modified | Offset 9391, 19 lines modified | ||
| 9391 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9391 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9392 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9392 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9393 | ·····················00232 | 9393 | ·····················00232 |
| 9394 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9394 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9395 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9395 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9396 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9396 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9397 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9399 | [[packages]] | ||
| 9400 | name·=·"pam_apparmor" | ||
| 9401 | version·=·"*" | ||
| 9398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9399 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9403 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9400 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9404 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9401 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9405 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9402 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9406 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9403 | -·name:·Ensure·pam_apparmor·is·installed | 9407 | -·name:·Ensure·pam_apparmor·is·installed |
| 9404 | ··package: | 9408 | ··package: |
| Offset 9417, 19 lines modified | Offset 9422, 14 lines modified | ||
| 9417 | ··-·NIST-800-53-SC-7(21) | 9422 | ··-·NIST-800-53-SC-7(21) |
| 9418 | ··-·enable_strategy | 9423 | ··-·enable_strategy |
| 9419 | ··-·low_complexity | 9424 | ··-·low_complexity |
| 9420 | ··-·low_disruption | 9425 | ··-·low_disruption |
| 9421 | ··-·medium_severity | 9426 | ··-·medium_severity |
| 9422 | ··-·no_reboot_needed | 9427 | ··-·no_reboot_needed |
| 9423 | ··-·package_pam_apparmor_installed | 9428 | ··-·package_pam_apparmor_installed |
| 9424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9425 | [[packages]] | ||
| 9426 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 35714/41187 bytes (86.71%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 83 lines modified | Offset 15162, 83 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·4 | 0003b400:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b410:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b420:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b430:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b440:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b450:·2220·6964·3d22·6964·6d35·3338·3922·3e3c··"·id="idm5389">< | |||
| 0003b460:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b470:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b480:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b450:·3338·3922·3e3c·7461·626c·6520·636c·6173··389"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b550:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b560:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b570:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b580:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b590:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b5a0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b5b0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b5c0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b5d0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b5e0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b5f0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b600:·0a20·202d·2043·4345·2d38·3330·3637·2d39··.··-·CCE-83067-9 | |||
| 0003b610:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b620:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b630:·2d53·4c45·532d·3132·2d30·3130·3439·390a··-SLES-12-010499. | |||
| 0003b640:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b650:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b660:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b670:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b680:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b6a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b6b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b6c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b6d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b490:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b4b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b4c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b4d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b75 | 0003b4e0:·7267·6574·3d22·2369·646d·3533·3930·2220··rget="#idm5390"· | ||
| 0003b76 | 0003b4f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b500:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b780 | 0003b510:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b79 | 0003b520:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003b530:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b540:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b7c0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b7d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b7e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b7f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b800:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b810:·3339·3022·3e3c·7072·653e·3c63·6f64·653e··390"><pre><code> | |||
| 0003b820:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b830:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b | 0003b550:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b560:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b570:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b580:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b590:·2220·6964·3d22·6964·6d35·3339·3022·3e3c··"·id="idm5390">< | |||
| 0003b5a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b5c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b5d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b610:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b640:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b660:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b670:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b680:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b690:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b6a0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b6b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b6c0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b6d0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b6e0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b6f0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b700:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| Max diff block lines reached; 662184/673414 bytes (98.33%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 19 lines modified | ||
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 139 | ··package: | 143 | ··package: |
| Offset 149, 19 lines modified | Offset 154, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 166 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1154, 14 lines modified | Offset 1154, 19 lines modified | ||
| 1154 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1154 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1155 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1155 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1156 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1156 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1157 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1157 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1158 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1158 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1159 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1159 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1160 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1160 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1162 | [[packages]] | ||
| 1163 | name·=·"sudo" | ||
| 1164 | version·=·"*" | ||
| 1161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1166 | -·name:·Ensure·sudo·is·installed | 1170 | -·name:·Ensure·sudo·is·installed |
| 1167 | ··package: | 1171 | ··package: |
| Offset 1174, 19 lines modified | Offset 1179, 14 lines modified | ||
| 1174 | ··-·PCI-DSSv4-2.2.6 | 1179 | ··-·PCI-DSSv4-2.2.6 |
| 1175 | ··-·enable_strategy | 1180 | ··-·enable_strategy |
| 1176 | ··-·low_complexity | 1181 | ··-·low_complexity |
| 1177 | ··-·low_disruption | 1182 | ··-·low_disruption |
| 1178 | ··-·medium_severity | 1183 | ··-·medium_severity |
| 1179 | ··-·no_reboot_needed | 1184 | ··-·no_reboot_needed |
| 1180 | ··-·package_sudo_installed | 1185 | ··-·package_sudo_installed |
| 1181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1182 | [[packages]] | ||
| 1183 | name·=·"sudo" | ||
| 1184 | version·=·"*" | ||
| 1185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1190 | #·Remediation·is·applicable·only·in·certain·platforms | 1191 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1191 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9502, 14 lines modified | Offset 9502, 19 lines modified | ||
| 9502 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9502 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9503 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9503 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9504 | ·····················00232 | 9504 | ·····················00232 |
| 9505 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 9505 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 9506 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9506 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9507 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9507 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9508 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 9508 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 9509 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9510 | [[packages]] | ||
| 9511 | name·=·"pam_apparmor" | ||
| 9512 | version·=·"*" | ||
| 9509 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9510 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9514 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9511 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9515 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9512 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9516 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9513 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9517 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9514 | -·name:·Ensure·pam_apparmor·is·installed | 9518 | -·name:·Ensure·pam_apparmor·is·installed |
| 9515 | ··package: | 9519 | ··package: |
| Offset 9528, 19 lines modified | Offset 9533, 14 lines modified | ||
| 9528 | ··-·NIST-800-53-SC-7(21) | 9533 | ··-·NIST-800-53-SC-7(21) |
| 9529 | ··-·enable_strategy | 9534 | ··-·enable_strategy |
| 9530 | ··-·low_complexity | 9535 | ··-·low_complexity |
| 9531 | ··-·low_disruption | 9536 | ··-·low_disruption |
| 9532 | ··-·medium_severity | 9537 | ··-·medium_severity |
| 9533 | ··-·no_reboot_needed | 9538 | ··-·no_reboot_needed |
| 9534 | ··-·package_pam_apparmor_installed | 9539 | ··-·package_pam_apparmor_installed |
| 9535 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9536 | [[packages]] | ||
| 9537 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 49390/54859 bytes (90.03%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16981, 83 lines modified | Offset 16981, 83 lines modified | ||
| 00042540:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 00042540:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 00042550:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00042550:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00042560:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00042560:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00042570:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00042570:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00042580:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00042580:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00042590:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00042590:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000425a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000425a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 000425b0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 000425c0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 000425d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000425e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000425f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042600:·3d22·6964·6d35·3338·3922·3e3c·7072·653e··="idm5389"><pre> | |||
| 00042610:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00042620:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 00042630:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 000425b0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000425c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000425d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000425e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000425f0:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 00042600:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00042610:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00042620:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042630:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042640:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042650:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00042660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042670:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00042680:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00042690:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000426a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 000426b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 000426c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000426d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 000426e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 000426f0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00042700:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 00042710:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 00042720:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 00042730:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 00042740:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 00042750:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00042760:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00042770:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00042780:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00042790:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 000427a0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 000427b0:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 000427c0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 000427d0:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 000427e0:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 000427f0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 00042800:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 00042810:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 00042820:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 00042830:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 00042840:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 00042850:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 00042860:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 00042870:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 00042880:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 00042890:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 000428a0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 00042 | 00042640:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 00042 | 00042650:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 00042 | 00042660:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 00042 | 00042670:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 000428 | 00042680:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004290 | 00042690:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | ||
| 00042 | 000426a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00042 | 000426b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00042 | 000426c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00042 | 000426d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00042 | 000426e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00042960:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 00042970:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00042980:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042990:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000429a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000429b0:·7365·2220·6964·3d22·6964·6d35·3339·3022··se"·id="idm5390" | |||
| 000429c0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 000429d0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00042 | 000426f0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 00042700:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00042710:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00042720:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00042730:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042740:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 00042750:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00042760:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00042770:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00042780:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00042790:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 000427a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000427b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000427c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000427d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000427e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 000427f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00042800:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00042810:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00042820:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00042830:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00042840:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00042850:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00042860:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00042870:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00042880:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00042890:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000428a0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| Max diff block lines reached; 286874/298104 bytes (96.23%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 529, 14 lines modified | Offset 529, 19 lines modified | ||
| 529 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 529 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 530 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 530 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 532 | ·············_\x8c_\x8i_\x8s············1.4.1 | 532 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 533 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 533 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 534 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 534 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 535 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 535 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 537 | [[packages]] | ||
| 538 | name·=·"aide" | ||
| 539 | version·=·"*" | ||
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 541 | -·name:·Ensure·aide·is·installed | 545 | -·name:·Ensure·aide·is·installed |
| 542 | ··package: | 546 | ··package: |
| Offset 552, 19 lines modified | Offset 557, 14 lines modified | ||
| 552 | ··-·PCI-DSSv4-11.5.2 | 557 | ··-·PCI-DSSv4-11.5.2 |
| 553 | ··-·enable_strategy | 558 | ··-·enable_strategy |
| 554 | ··-·low_complexity | 559 | ··-·low_complexity |
| 555 | ··-·low_disruption | 560 | ··-·low_disruption |
| 556 | ··-·medium_severity | 561 | ··-·medium_severity |
| 557 | ··-·no_reboot_needed | 562 | ··-·no_reboot_needed |
| 558 | ··-·package_aide_installed | 563 | ··-·package_aide_installed |
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 560 | [[packages]] | ||
| 561 | name·=·"aide" | ||
| 562 | version·=·"*" | ||
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 568 | #·Remediation·is·applicable·only·in·certain·platforms | 569 | #·Remediation·is·applicable·only·in·certain·platforms |
| 569 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7473, 14 lines modified | Offset 7473, 18 lines modified | ||
| 7473 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled | 7473 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled |
| 7474 | Identifiers:·CCE-91646-0 | 7474 | Identifiers:·CCE-91646-0 |
| 7475 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 7475 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 7476 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 | 7476 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 7477 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7477 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7478 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 | 7478 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 |
| 7479 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 7479 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 7480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7481 | [customizations.services] | ||
| 7482 | enabled·=·["pcscd"] | ||
| 7480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7485 | -·name:·Enable·service·pcscd | 7488 | -·name:·Enable·service·pcscd |
| 7486 | ··block: | 7489 | ··block: |
| Offset 7516, 18 lines modified | Offset 7520, 14 lines modified | ||
| 7516 | ··-·PCI-DSS-Req-8.3 | 7520 | ··-·PCI-DSS-Req-8.3 |
| 7517 | ··-·enable_strategy | 7521 | ··-·enable_strategy |
| 7518 | ··-·low_complexity | 7522 | ··-·low_complexity |
| 7519 | ··-·low_disruption | 7523 | ··-·low_disruption |
| 7520 | ··-·medium_severity | 7524 | ··-·medium_severity |
| 7521 | ··-·no_reboot_needed | 7525 | ··-·no_reboot_needed |
| 7522 | ··-·service_pcscd_enabled | 7526 | ··-·service_pcscd_enabled |
| 7523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7524 | [customizations.services] | ||
| 7525 | enabled·=·["pcscd"] | ||
| 7526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7527 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7528 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7529 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7529 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7530 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7530 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7531 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7531 | #·Remediation·is·applicable·only·in·certain·platforms | 7532 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7532 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7533 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9804, 14 lines modified | Offset 9804, 19 lines modified | ||
| 9804 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 9804 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 9805 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 9805 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 9806 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 9806 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 9807 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 9807 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 9808 | ·············_\x8c_\x8i_\x8s············4.2.4 | 9808 | ·············_\x8c_\x8i_\x8s············4.2.4 |
| 9809 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 9809 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 9810 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 9810 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 9811 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9812 | [[packages]] | ||
| 9813 | name·=·"logrotate" | ||
| 9814 | version·=·"*" | ||
| 9811 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9815 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9812 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9816 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9813 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9817 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9814 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9818 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9815 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9819 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9816 | -·name:·Ensure·logrotate·is·installed | 9820 | -·name:·Ensure·logrotate·is·installed |
| 9817 | ··package: | 9821 | ··package: |
| Offset 9825, 19 lines modified | Offset 9830, 14 lines modified | ||
| 9825 | ··-·PCI-DSSv4-10.5.1 | 9830 | ··-·PCI-DSSv4-10.5.1 |
| 9826 | ··-·enable_strategy | 9831 | ··-·enable_strategy |
| 9827 | ··-·low_complexity | 9832 | ··-·low_complexity |
| 9828 | ··-·low_disruption | 9833 | ··-·low_disruption |
| 9829 | ··-·medium_severity | 9834 | ··-·medium_severity |
| 9830 | ··-·no_reboot_needed | 9835 | ··-·no_reboot_needed |
| 9831 | ··-·package_logrotate_installed | 9836 | ··-·package_logrotate_installed |
| 9832 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9833 | [[packages]] | ||
| 9834 | name·=·"logrotate" | ||
| 9835 | version·=·"*" | ||
| 9836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 20115/25711 bytes (78.23%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e00:·323 | 00037e00:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16926, 83 lines modified | Offset 16926, 83 lines modified | ||
| 000421d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000421d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000421e0:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 000421e0:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 000421f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000421f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00042200:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00042200:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00042210:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00042210:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00042220:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00042220:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00042230:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00042230:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00042240:·6d65·6469·6174·696f·6e20·4 | 00042240:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00042250:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00042260:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00042270:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00042280:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00042290:·6d35·3338·3922·3e3c·7461·626c·6520·636c··m5389"><table·cl | |||
| 000422a0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000422b0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000422c0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000422d0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000422e0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000422f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00042300:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00042310:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00042320:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00042330:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042340:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00042350:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00042 | 00042250:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 00042260:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042270:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042280:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042290:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 000422a0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 000422b0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000422c0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 000422d0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 000422e0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000422f0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00042300:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00042310:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00042320:·7461·7267·6574·3d22·2369·646d·3533·3930··target="#idm5390 | |||
| 00042330:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00042340:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042350:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042360:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042370:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042380:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042390:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000423a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000423b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000423c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000423d0:·7365·2220·6964·3d22·6964·6d35·3339·3022··se"·id="idm5390" | |||
| 000423e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000423f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00042400:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042410:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042420:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042430:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00042440:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042450:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00042460:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00042470:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00042480:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00042 | 00042490:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 000424a0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000424b0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 000424c0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 000424d0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 000424e0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 000424f0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 00042500:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 00042510:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 00042520:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 00042530:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00042540:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00042550:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00042560:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00042570:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 00042580:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 00042590:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 000425a0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 000425b0:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 000425c0:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 000425d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 000425e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 000425f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 00042600:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 00042610:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 00042620:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 00042630:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 00042640:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 00042650:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 00042660:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 00042670:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 00042680:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 00042380:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00042390:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 000423a0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 000423b0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 000423c0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 000423d0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 000423e0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 000423f0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00042400:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00042410:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00042420:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00042430:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00042440:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 00042450:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 00042460:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 00042470:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 00042480:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 00042490:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| Max diff block lines reached; 157266/168496 bytes (93.34%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 519, 14 lines modified | Offset 519, 19 lines modified | ||
| 519 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 519 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 521 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 521 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 522 | ·············_\x8c_\x8i_\x8s············1.4.1 | 522 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 523 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 523 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 524 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 524 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 525 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 525 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 527 | [[packages]] | ||
| 528 | name·=·"aide" | ||
| 529 | version·=·"*" | ||
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 527 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 528 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 529 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 530 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 531 | -·name:·Ensure·aide·is·installed | 535 | -·name:·Ensure·aide·is·installed |
| 532 | ··package: | 536 | ··package: |
| Offset 542, 19 lines modified | Offset 547, 14 lines modified | ||
| 542 | ··-·PCI-DSSv4-11.5.2 | 547 | ··-·PCI-DSSv4-11.5.2 |
| 543 | ··-·enable_strategy | 548 | ··-·enable_strategy |
| 544 | ··-·low_complexity | 549 | ··-·low_complexity |
| 545 | ··-·low_disruption | 550 | ··-·low_disruption |
| 546 | ··-·medium_severity | 551 | ··-·medium_severity |
| 547 | ··-·no_reboot_needed | 552 | ··-·no_reboot_needed |
| 548 | ··-·package_aide_installed | 553 | ··-·package_aide_installed |
| 549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 550 | [[packages]] | ||
| 551 | name·=·"aide" | ||
| 552 | version·=·"*" | ||
| 553 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 554 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 554 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 555 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 555 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 556 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 556 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 557 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 557 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 558 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 558 | #·Remediation·is·applicable·only·in·certain·platforms | 559 | #·Remediation·is·applicable·only·in·certain·platforms |
| 559 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 560 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 7463, 14 lines modified | Offset 7463, 18 lines modified | ||
| 7463 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled | 7463 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled |
| 7464 | Identifiers:·CCE-91646-0 | 7464 | Identifiers:·CCE-91646-0 |
| 7465 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 7465 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 7466 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 | 7466 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 7467 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7467 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7468 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 | 7468 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 |
| 7469 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 7469 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 7470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7471 | [customizations.services] | ||
| 7472 | enabled·=·["pcscd"] | ||
| 7470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7475 | -·name:·Enable·service·pcscd | 7478 | -·name:·Enable·service·pcscd |
| 7476 | ··block: | 7479 | ··block: |
| Offset 7506, 18 lines modified | Offset 7510, 14 lines modified | ||
| 7506 | ··-·PCI-DSS-Req-8.3 | 7510 | ··-·PCI-DSS-Req-8.3 |
| 7507 | ··-·enable_strategy | 7511 | ··-·enable_strategy |
| 7508 | ··-·low_complexity | 7512 | ··-·low_complexity |
| 7509 | ··-·low_disruption | 7513 | ··-·low_disruption |
| 7510 | ··-·medium_severity | 7514 | ··-·medium_severity |
| 7511 | ··-·no_reboot_needed | 7515 | ··-·no_reboot_needed |
| 7512 | ··-·service_pcscd_enabled | 7516 | ··-·service_pcscd_enabled |
| 7513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7514 | [customizations.services] | ||
| 7515 | enabled·=·["pcscd"] | ||
| 7516 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7517 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7517 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7518 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7518 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7519 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7519 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7520 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7520 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7521 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7521 | #·Remediation·is·applicable·only·in·certain·platforms | 7522 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7522 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 7523 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9571, 14 lines modified | Offset 9571, 19 lines modified | ||
| 9571 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 9571 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 9572 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 9572 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 9573 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 9573 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 9574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 9574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 9575 | ·············_\x8c_\x8i_\x8s············4.2.4 | 9575 | ·············_\x8c_\x8i_\x8s············4.2.4 |
| 9576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 9576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 9577 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 9577 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 9578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9579 | [[packages]] | ||
| 9580 | name·=·"logrotate" | ||
| 9581 | version·=·"*" | ||
| 9578 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9582 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9579 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9583 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9580 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9584 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9581 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9585 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9582 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9586 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9583 | -·name:·Ensure·logrotate·is·installed | 9587 | -·name:·Ensure·logrotate·is·installed |
| 9584 | ··package: | 9588 | ··package: |
| Offset 9592, 19 lines modified | Offset 9597, 14 lines modified | ||
| 9592 | ··-·PCI-DSSv4-10.5.1 | 9597 | ··-·PCI-DSSv4-10.5.1 |
| 9593 | ··-·enable_strategy | 9598 | ··-·enable_strategy |
| 9594 | ··-·low_complexity | 9599 | ··-·low_complexity |
| 9595 | ··-·low_disruption | 9600 | ··-·low_disruption |
| 9596 | ··-·medium_severity | 9601 | ··-·medium_severity |
| 9597 | ··-·no_reboot_needed | 9602 | ··-·no_reboot_needed |
| 9598 | ··-·package_logrotate_installed | 9603 | ··-·package_logrotate_installed |
| 9599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9600 | [[packages]] | ||
| 9601 | name·=·"logrotate" | ||
| 9602 | version·=·"*" | ||
| 9603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 9847/15445 bytes (63.76%) of diff not shown. | |||
| Offset 14304, 16 lines modified | Offset 14304, 16 lines modified | ||
| 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·2020·2028·6173·206f·6620·3230·323 | 00037e60:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00037e70:·3 | 00037e70:·312d·3039·290a·2020·2020·2020·2020·2020··1-09).·········· | ||
| 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys |
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group | 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group |
| 53 | contains·4·groups·and·3·rules | 53 | contains·4·groups·and·3·rules |
| 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 83 lines modified | Offset 15107, 83 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20·4 | 0003b090:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b0b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0e0:·6d35·3338·3922·3e3c·7461·626c·6520·636c··m5389"><table·cl | |||
| 0003b0f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b100:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b110:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b120:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b130:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b150:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b160:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b170:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b180:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b190:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b0a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b0b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0e0:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b100:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b110:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b120:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b130:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b140:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b150:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b160:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b170:·7461·7267·6574·3d22·2369·646d·3533·3930··target="#idm5390 | |||
| 0003b180:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b190:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b1d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b1f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b200:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b210:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b220:·7365·2220·6964·3d22·6964·6d35·3339·3022··se"·id="idm5390" | |||
| 0003b230:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b240:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b250:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b260:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b270:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b280:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b290:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b2e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b2f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b300:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b310:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b320:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b330:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b340:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b350:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b360:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b370:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b380:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b390:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b3a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b3b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b3c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b3d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b3e0:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 0003b3f0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b400:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b410:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 0003b420:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b430:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b440:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b450:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b460:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b470:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b480:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b490:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b4a0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b4b0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b4c0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b4d0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b1d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b1f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b200:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b210:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b220:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b230:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b240:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b250:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b260:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b270:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b280:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b290:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b2a0:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b2c0:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b2d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b2e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| Max diff block lines reached; 185248/196478 bytes (94.28%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 137, 19 lines modified | Offset 142, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 144 | ··-·low_complexity |
| 140 | ··-·low_disruption | 145 | ··-·low_disruption |
| 141 | ··-·medium_severity | 146 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9475, 14 lines modified | Offset 9475, 19 lines modified | ||
| 9475 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed | 9475 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed |
| 9476 | Identifiers:·CCE-83009-1 | 9476 | Identifiers:·CCE-83009-1 |
| 9477 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 9477 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 9478 | ·············_\x8n_\x8i_\x8s_\x8t····AC-11(a),·AC-11(b),·AC-11(1) | 9478 | ·············_\x8n_\x8i_\x8s_\x8t····AC-11(a),·AC-11(b),·AC-11(1) |
| 9479 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 9479 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 9480 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010070 | 9480 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010070 |
| 9481 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217108r603262_rule | 9481 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217108r603262_rule |
| 9482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9483 | [[packages]] | ||
| 9484 | name·=·"kbd" | ||
| 9485 | version·=·"*" | ||
| 9482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9487 | -·name:·Ensure·kbd·is·installed | 9491 | -·name:·Ensure·kbd·is·installed |
| 9488 | ··package: | 9492 | ··package: |
| Offset 9497, 19 lines modified | Offset 9502, 14 lines modified | ||
| 9497 | ··-·NIST-800-53-AC-11(b) | 9502 | ··-·NIST-800-53-AC-11(b) |
| 9498 | ··-·enable_strategy | 9503 | ··-·enable_strategy |
| 9499 | ··-·low_complexity | 9504 | ··-·low_complexity |
| 9500 | ··-·low_disruption | 9505 | ··-·low_disruption |
| 9501 | ··-·medium_severity | 9506 | ··-·medium_severity |
| 9502 | ··-·no_reboot_needed | 9507 | ··-·no_reboot_needed |
| 9503 | ··-·vlock_installed | 9508 | ··-·vlock_installed |
| 9504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9505 | [[packages]] | ||
| 9506 | name·=·"kbd" | ||
| 9507 | version·=·"*" | ||
| 9508 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9509 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9509 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9510 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9510 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9511 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9511 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9512 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9512 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9513 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9513 | #·Remediation·is·applicable·only·in·certain·platforms | 9514 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9514 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 9515 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 12520, 14 lines modified | Offset 12520, 19 lines modified | ||
| 12520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 12520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 12521 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 12521 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 12522 | ·····················00232 | 12522 | ·····················00232 |
| 12523 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 | 12523 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010600 |
| 12524 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 12524 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 12525 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 12525 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 12526 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule | 12526 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217158r854093_rule |
| 12527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12528 | [[packages]] | ||
| 12529 | name·=·"pam_apparmor" | ||
| 12530 | version·=·"*" | ||
| 12527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 12531 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 12528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 12532 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 12529 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 12533 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 12530 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 12534 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 12531 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 12535 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 12532 | -·name:·Ensure·pam_apparmor·is·installed | 12536 | -·name:·Ensure·pam_apparmor·is·installed |
| 12533 | ··package: | 12537 | ··package: |
| Offset 12546, 19 lines modified | Offset 12551, 14 lines modified | ||
| 12546 | ··-·NIST-800-53-SC-7(21) | 12551 | ··-·NIST-800-53-SC-7(21) |
| 12547 | ··-·enable_strategy | 12552 | ··-·enable_strategy |
| 12548 | ··-·low_complexity | 12553 | ··-·low_complexity |
| 12549 | ··-·low_disruption | 12554 | ··-·low_disruption |
| 12550 | ··-·medium_severity | 12555 | ··-·medium_severity |
| 12551 | ··-·no_reboot_needed | 12556 | ··-·no_reboot_needed |
| 12552 | ··-·package_pam_apparmor_installed | 12557 | ··-·package_pam_apparmor_installed |
| 12553 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12554 | [[packages]] | ||
| 12555 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 16423/21963 bytes (74.78%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 83 lines modified | Offset 15134, 83 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b250:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b270:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b280:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b290:·3d22·6964·6d36·3333·3222·3e3c·7072·653e··="idm6332"><pre> | |||
| 0003b2a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2b0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2c0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b240:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b250:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b260:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b270:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b280:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b290:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b300:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b330:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b340:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b350:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b360:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b370:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b380:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b390:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3a0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3b0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3c0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3d0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b3f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b400:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b410:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b420:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b430:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b440:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b470:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003b2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003b2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003b300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003b310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003b320:·3d22·2369·646d·3633·3333·2220·7461·6269··="#idm6333"·tabi | ||
| 0003b | 0003b330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003b340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003b350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5d | 0003b360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003b370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b5f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b600:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b610:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b620:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b630:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b640:·7365·2220·6964·3d22·6964·6d36·3333·3322··se"·id="idm6333" | |||
| 0003b650:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b660:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b | 0003b380:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b390:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b3a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3d0:·3d22·6964·6d36·3333·3322·3e3c·7461·626c··="idm6333"><tabl | |||
| 0003b3e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b400:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b410:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b420:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b430:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b440:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b450:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b460:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b470:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b480:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b490:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b4a0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4b0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4c0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4d0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4e0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4f0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b500:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b510:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b520:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b530:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| Max diff block lines reached; 362438/373668 bytes (96.99%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 553, 14 lines modified | Offset 553, 19 lines modified | ||
| 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 565 | -·name:·Ensure·sudo·is·installed | 569 | -·name:·Ensure·sudo·is·installed |
| 566 | ··package: | 570 | ··package: |
| Offset 573, 19 lines modified | Offset 578, 14 lines modified | ||
| 573 | ··-·PCI-DSSv4-2.2.6 | 578 | ··-·PCI-DSSv4-2.2.6 |
| 574 | ··-·enable_strategy | 579 | ··-·enable_strategy |
| 575 | ··-·low_complexity | 580 | ··-·low_complexity |
| 576 | ··-·low_disruption | 581 | ··-·low_disruption |
| 577 | ··-·medium_severity | 582 | ··-·medium_severity |
| 578 | ··-·no_reboot_needed | 583 | ··-·no_reboot_needed |
| 579 | ··-·package_sudo_installed | 584 | ··-·package_sudo_installed |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | [[packages]] | ||
| 582 | name·=·"sudo" | ||
| 583 | version·=·"*" | ||
| 584 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 585 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 586 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 587 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 588 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 589 | #·Remediation·is·applicable·only·in·certain·platforms | 590 | #·Remediation·is·applicable·only·in·certain·platforms |
| 590 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 591 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1392, 14 lines modified | Offset 1392, 19 lines modified | ||
| 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1392 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1393 | ·············automatic,·regular·execution. | 1393 | ·············automatic,·regular·execution. |
| 1394 | Severity: ···medium | 1394 | Severity: ···medium |
| 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1395 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1396 | Identifiers:·CCE-91163-6 | 1396 | Identifiers:·CCE-91163-6 |
| 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1397 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1398 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1400 | [[packages]] | ||
| 1401 | name·=·"dnf-automatic" | ||
| 1402 | version·=·"*" | ||
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1404 | -·name:·Ensure·dnf-automatic·is·installed | 1408 | -·name:·Ensure·dnf-automatic·is·installed |
| 1405 | ··package: | 1409 | ··package: |
| Offset 1409, 19 lines modified | Offset 1414, 14 lines modified | ||
| 1409 | ··-·CCE-91163-6 | 1414 | ··-·CCE-91163-6 |
| 1410 | ··-·enable_strategy | 1415 | ··-·enable_strategy |
| 1411 | ··-·low_complexity | 1416 | ··-·low_complexity |
| 1412 | ··-·low_disruption | 1417 | ··-·low_disruption |
| 1413 | ··-·medium_severity | 1418 | ··-·medium_severity |
| 1414 | ··-·no_reboot_needed | 1419 | ··-·no_reboot_needed |
| 1415 | ··-·package_dnf-automatic_installed | 1420 | ··-·package_dnf-automatic_installed |
| 1416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1417 | [[packages]] | ||
| 1418 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 24392/29750 bytes (81.99%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 83 lines modified | Offset 15139, 83 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·204 | 0003b290:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b2a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2e0:·2069·643d·2269·646d·3633·3332·223e·3c70···id="idm6332"><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b300:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b310:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b2e0:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b300:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b310:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b360:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b370:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b380:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b390:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b3a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b3b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b3c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b3d0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b3e0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b3f0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b400:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b410:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b420:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b430:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b440:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b450:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b460:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b470:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b480:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b490:·2020·2d20·4343·452d·3833·3238·392d·390a····-·CCE-83289-9. | |||
| 0003b4a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b4b0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b4c0:·534c·4553·2d31·352d·3031·3034·3139·0a20··SLES-15-010419.· | |||
| 0003b4d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b4e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b4f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b500:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b510:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b520:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b530:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b540:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b550:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b560:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b570:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b580:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b | 0003b320:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003b | 0003b330:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b340:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b5 | 0003b350:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b360:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b370:·6765·743d·2223·6964·6d36·3333·3322·2074··get="#idm6333"·t | ||
| 0003b | 0003b380:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b | 0003b390:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b61 | 0003b3a0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b | 0003b3b0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b6 | 0003b3c0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b | 0003b3d0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b650:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b660:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b670:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b680:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b690:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b6a0:·3333·223e·3c70·7265·3e3c·636f·6465·3e0a··33"><pre><code>. | |||
| 0003b6b0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b6c0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b | 0003b3e0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b3f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b400:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b410:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b420:·2069·643d·2269·646d·3633·3333·223e·3c74···id="idm6333"><t | |||
| 0003b430:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b440:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b450:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b460:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b470:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b480:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b490:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b4b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b4c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b500:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b510:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b520:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b530:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b540:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b550:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b560:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b570:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b580:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b590:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| Max diff block lines reached; 362438/373668 bytes (96.99%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 126 | ·············_\x8c_\x8i_\x8s············1.4.1 | 126 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 146, 19 lines modified | Offset 151, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1157, 14 lines modified | Offset 1157, 19 lines modified | ||
| 1157 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1157 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1158 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1158 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1159 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1159 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1160 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1160 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1161 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1161 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1162 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1162 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1163 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1163 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1165 | [[packages]] | ||
| 1166 | name·=·"sudo" | ||
| 1167 | version·=·"*" | ||
| 1164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1169 | -·name:·Ensure·sudo·is·installed | 1173 | -·name:·Ensure·sudo·is·installed |
| 1170 | ··package: | 1174 | ··package: |
| Offset 1177, 19 lines modified | Offset 1182, 14 lines modified | ||
| 1177 | ··-·PCI-DSSv4-2.2.6 | 1182 | ··-·PCI-DSSv4-2.2.6 |
| 1178 | ··-·enable_strategy | 1183 | ··-·enable_strategy |
| 1179 | ··-·low_complexity | 1184 | ··-·low_complexity |
| 1180 | ··-·low_disruption | 1185 | ··-·low_disruption |
| 1181 | ··-·medium_severity | 1186 | ··-·medium_severity |
| 1182 | ··-·no_reboot_needed | 1187 | ··-·no_reboot_needed |
| 1183 | ··-·package_sudo_installed | 1188 | ··-·package_sudo_installed |
| 1184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1185 | [[packages]] | ||
| 1186 | name·=·"sudo" | ||
| 1187 | version·=·"*" | ||
| 1188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1193 | #·Remediation·is·applicable·only·in·certain·platforms | 1194 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1194 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1195 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1996, 14 lines modified | Offset 1996, 19 lines modified | ||
| 1996 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1996 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1997 | ·············automatic,·regular·execution. | 1997 | ·············automatic,·regular·execution. |
| 1998 | Severity: ···medium | 1998 | Severity: ···medium |
| 1999 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1999 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 2000 | Identifiers:·CCE-91163-6 | 2000 | Identifiers:·CCE-91163-6 |
| 2001 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 2001 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 2002 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 2002 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 2003 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2004 | [[packages]] | ||
| 2005 | name·=·"dnf-automatic" | ||
| 2006 | version·=·"*" | ||
| 2003 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2007 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2004 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2008 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2005 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2009 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2006 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2010 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2007 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2011 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2008 | -·name:·Ensure·dnf-automatic·is·installed | 2012 | -·name:·Ensure·dnf-automatic·is·installed |
| 2009 | ··package: | 2013 | ··package: |
| Offset 2013, 19 lines modified | Offset 2018, 14 lines modified | ||
| 2013 | ··-·CCE-91163-6 | 2018 | ··-·CCE-91163-6 |
| 2014 | ··-·enable_strategy | 2019 | ··-·enable_strategy |
| 2015 | ··-·low_complexity | 2020 | ··-·low_complexity |
| 2016 | ··-·low_disruption | 2021 | ··-·low_disruption |
| 2017 | ··-·medium_severity | 2022 | ··-·medium_severity |
| 2018 | ··-·no_reboot_needed | 2023 | ··-·no_reboot_needed |
| 2019 | ··-·package_dnf-automatic_installed | 2024 | ··-·package_dnf-automatic_installed |
| 2020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2021 | [[packages]] | ||
| 2022 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 24392/29758 bytes (81.97%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 83 lines modified | Offset 15125, 83 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | ||
| 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b230:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b | 0003b1b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b1c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b1d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b200:·643d·2269·646d·3633·3332·223e·3c70·7265··d="idm6332"><pre | |||
| 0003b210:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b220:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b230:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b240:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b250:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b260:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b270:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b290:·743d·2223·6964·6d36·3333·3322·2074·6162··t="#idm6333"·tab | |||
| 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b300:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3633·3333·223e·3c74·6162··d="idm6333"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b450:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b460:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b470:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b480:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b490:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b4a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b4b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b4c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b4d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b4e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b4f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b500:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b510:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b520:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b530:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b540:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b550:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b560:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b570:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b580:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b590:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b5a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b5b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b5c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b5d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b5e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b300:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b310:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b320:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b330:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b340:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b350:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b360:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b370:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b380:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b390:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b3a0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b3b0:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b3c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b3e0:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b3f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| Max diff block lines reached; 267860/279090 bytes (95.98%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 533, 14 lines modified | Offset 533, 19 lines modified | ||
| 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 541 | [[packages]] | ||
| 542 | name·=·"sudo" | ||
| 543 | version·=·"*" | ||
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 545 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 546 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 547 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 548 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 545 | -·name:·Ensure·sudo·is·installed | 549 | -·name:·Ensure·sudo·is·installed |
| 546 | ··package: | 550 | ··package: |
| Offset 553, 19 lines modified | Offset 558, 14 lines modified | ||
| 553 | ··-·PCI-DSSv4-2.2.6 | 558 | ··-·PCI-DSSv4-2.2.6 |
| 554 | ··-·enable_strategy | 559 | ··-·enable_strategy |
| 555 | ··-·low_complexity | 560 | ··-·low_complexity |
| 556 | ··-·low_disruption | 561 | ··-·low_disruption |
| 557 | ··-·medium_severity | 562 | ··-·medium_severity |
| 558 | ··-·no_reboot_needed | 563 | ··-·no_reboot_needed |
| 559 | ··-·package_sudo_installed | 564 | ··-·package_sudo_installed |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 565 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 566 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 567 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 568 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 569 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 569 | #·Remediation·is·applicable·only·in·certain·platforms | 570 | #·Remediation·is·applicable·only·in·certain·platforms |
| 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 571 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1302, 14 lines modified | Offset 1302, 19 lines modified | ||
| 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for | 1302 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade·suitable·for |
| 1303 | ·············automatic,·regular·execution. | 1303 | ·············automatic,·regular·execution. |
| 1304 | Severity: ···medium | 1304 | Severity: ···medium |
| 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 1305 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 1306 | Identifiers:·CCE-91163-6 | 1306 | Identifiers:·CCE-91163-6 |
| 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 1307 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 1308 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1310 | [[packages]] | ||
| 1311 | name·=·"dnf-automatic" | ||
| 1312 | version·=·"*" | ||
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1314 | -·name:·Ensure·dnf-automatic·is·installed | 1318 | -·name:·Ensure·dnf-automatic·is·installed |
| 1315 | ··package: | 1319 | ··package: |
| Offset 1319, 19 lines modified | Offset 1324, 14 lines modified | ||
| 1319 | ··-·CCE-91163-6 | 1324 | ··-·CCE-91163-6 |
| 1320 | ··-·enable_strategy | 1325 | ··-·enable_strategy |
| 1321 | ··-·low_complexity | 1326 | ··-·low_complexity |
| 1322 | ··-·low_disruption | 1327 | ··-·low_disruption |
| 1323 | ··-·medium_severity | 1328 | ··-·medium_severity |
| 1324 | ··-·no_reboot_needed | 1329 | ··-·no_reboot_needed |
| 1325 | ··-·package_dnf-automatic_installed | 1330 | ··-·package_dnf-automatic_installed |
| 1326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1327 | [[packages]] | ||
| 1328 | name·=·"dnf-automatic" | ||
| Max diff block lines reached; 13332/18809 bytes (70.88%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·342d·3131·2d30·3929·0a20·2020···2024-11-09).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 72 lines modified | Offset 14793, 72 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | ||
| 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039d00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039d10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039d20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039d30:·7073·6522·2069·643d·2269·646d·3838·3931··pse"·id="idm8891 | |||
| 00039d40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039d50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039d60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039d70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039d80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039d90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039da0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039db0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039dc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039dd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039de0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039df0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039e10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039e30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039e40:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039e50:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 00039e60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00039e70:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039e80:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039e90:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039ea0:·3a0a·2020·2d20·4343·452d·3931·3136·332d··:.··-·CCE-91163- | |||
| 00039eb0:·360a·2020·2d20·656e·6162·6c65·5f73·7472··6.··-·enable_str | |||
| 00039ec0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039ed0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039ee0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039ef0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039f00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039f10:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039f20:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 00039f30:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00039f40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f80:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00039f90:·3839·3222·2074·6162·696e·6465·783d·2230··892"·tabindex="0 | |||
| 00039fa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039fb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039fc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039cf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003 | 00039d00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 0003 | 00039d10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003 | 00039d20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003 | 00039d30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003 | 00039d40:·643d·2269·646d·3838·3931·223e·3c70·7265··d="idm8891"><pre | ||
| 0003 | 00039d50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003 | 00039d60:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | ||
| 0003 | 00039d70:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | ||
| 0003 | 00039d80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | ||
| 00039d90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039da0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039db0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039dc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039dd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039de0:·3838·3932·2220·7461·6269·6e64·6578·3d22··8892"·tabindex=" | |||
| 00039df0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00039e00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00039e10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00039e20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00039e30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00039e40:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00039e50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039e60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039e70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039e80:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00039e90:·3839·3222·3e3c·7461·626c·6520·636c·6173··892"><table·clas | |||
| 00039ea0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039eb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039ec0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039ed0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039ee0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039ef0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039f00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039f10:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039f20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039f30:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039f40:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039f50:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039f60:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039f70:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039f80:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00039f90:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 00039fa0:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 00039fb0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 00039fc0:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 00039fd0:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 00039fe0:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 00039ff0:·6167·733a·0a20·202d·2043·4345·2d39·3131··ags:.··-·CCE-911 | |||
| 0003a000:·3633·2d36·0a20·202d·2065·6e61·626c·655f··63-6.··-·enable_ | |||
| 0003a010:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003a020:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003a030:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003a040:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003a050:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003a060:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| Max diff block lines reached; 414/10126 bytes (4.09%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 14 lines modified | Offset 87, 19 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | [[packages]] | ||
| 96 | name·=·"dnf-automatic" | ||
| 97 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | -·name:·Ensure·dnf-automatic·is·installed | 103 | -·name:·Ensure·dnf-automatic·is·installed |
| 100 | ··package: | 104 | ··package: |
| Offset 104, 19 lines modified | Offset 109, 14 lines modified | ||
| 104 | ··-·CCE-91163-6 | 109 | ··-·CCE-91163-6 |
| 105 | ··-·enable_strategy | 110 | ··-·enable_strategy |
| 106 | ··-·low_complexity | 111 | ··-·low_complexity |
| 107 | ··-·low_disruption | 112 | ··-·low_disruption |
| 108 | ··-·medium_severity | 113 | ··-·medium_severity |
| 109 | ··-·no_reboot_needed | 114 | ··-·no_reboot_needed |
| 110 | ··-·package_dnf-automatic_installed | 115 | ··-·package_dnf-automatic_installed |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"dnf-automatic" | ||
| 114 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | zypper·install·-y·"dnf-automatic" | 121 | zypper·install·-y·"dnf-automatic" |
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 83 lines modified | Offset 15171, 83 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | ||
| 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b4a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4e0:·6964·3d22·6964·6d36·3333·3222·3e3c·7072··id="idm6332"><pr | |||
| 0003b4f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b500:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b510:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b490:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b4a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4d0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 0003b4e0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b4f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b500:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b510:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b520:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b530:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b560:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b570:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b580:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b590:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b5b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b5e0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b5f0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b600:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b610:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b620:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b630:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b640:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b650:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b660:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b670:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b680:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b690:·202d·2043·4345·2d38·3332·3839·2d39·0a20···-·CCE-83289-9.· | |||
| 0003b6a0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6b0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b6c0:·4c45·532d·3135·2d30·3130·3431·390a·2020··LES-15-010419.·· | |||
| 0003b6d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b6e0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b6f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b700:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b710:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b720:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b730:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b740:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b750:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b760:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b770:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b780:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b520:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b530:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b7 | 0003b540:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b550:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b560:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b570:·6574·3d22·2369·646d·3633·3333·2220·7461··et="#idm6333"·ta | ||
| 0003b | 0003b580:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b590:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b5a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b5b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b5c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b5d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b850:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b860:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b870:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b880:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b890:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 0003b8a0:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0003b8b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b8c0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b | 0003b5e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d36·3333·3322·3e3c·7461··id="idm6333"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b700:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b710:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b720:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b730:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b740:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b750:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b760:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b770:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b780:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| Max diff block lines reached; 804408/815638 bytes (98.62%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 128, 14 lines modified | Offset 128, 19 lines modified | ||
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 131 | ·············_\x8c_\x8i_\x8s············1.4.1 | 131 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 141 | ··package: | 145 | ··package: |
| Offset 151, 19 lines modified | Offset 156, 14 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 158 | ··-·low_complexity |
| 154 | ··-·low_disruption | 159 | ··-·low_disruption |
| 155 | ··-·medium_severity | 160 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1022, 14 lines modified | Offset 1022, 19 lines modified | ||
| 1022 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1022 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1023 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1023 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1024 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1024 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1025 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1025 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1026 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1026 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1027 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1027 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1028 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1028 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1029 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1030 | [[packages]] | ||
| 1031 | name·=·"sudo" | ||
| 1032 | version·=·"*" | ||
| 1029 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1033 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1030 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1034 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1031 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1035 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1032 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1036 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1033 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1037 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1034 | -·name:·Ensure·sudo·is·installed | 1038 | -·name:·Ensure·sudo·is·installed |
| 1035 | ··package: | 1039 | ··package: |
| Offset 1042, 19 lines modified | Offset 1047, 14 lines modified | ||
| 1042 | ··-·PCI-DSSv4-2.2.6 | 1047 | ··-·PCI-DSSv4-2.2.6 |
| 1043 | ··-·enable_strategy | 1048 | ··-·enable_strategy |
| 1044 | ··-·low_complexity | 1049 | ··-·low_complexity |
| 1045 | ··-·low_disruption | 1050 | ··-·low_disruption |
| 1046 | ··-·medium_severity | 1051 | ··-·medium_severity |
| 1047 | ··-·no_reboot_needed | 1052 | ··-·no_reboot_needed |
| 1048 | ··-·package_sudo_installed | 1053 | ··-·package_sudo_installed |
| 1049 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1050 | [[packages]] | ||
| 1051 | name·=·"sudo" | ||
| 1052 | version·=·"*" | ||
| 1053 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1054 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1054 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1055 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1055 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1056 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1056 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1057 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1057 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1058 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1058 | #·Remediation·is·applicable·only·in·certain·platforms | 1059 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1059 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1060 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9332, 14 lines modified | Offset 9332, 19 lines modified | ||
| 9332 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9332 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9333 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9333 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9334 | ·····················00232 | 9334 | ·····················00232 |
| 9335 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9335 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9336 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9336 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9337 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9337 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9338 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9338 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9340 | [[packages]] | ||
| 9341 | name·=·"pam_apparmor" | ||
| 9342 | version·=·"*" | ||
| 9339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9340 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9341 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9342 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9343 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9344 | -·name:·Ensure·pam_apparmor·is·installed | 9348 | -·name:·Ensure·pam_apparmor·is·installed |
| 9345 | ··package: | 9349 | ··package: |
| Offset 9358, 19 lines modified | Offset 9363, 14 lines modified | ||
| 9358 | ··-·NIST-800-53-SC-7(21) | 9363 | ··-·NIST-800-53-SC-7(21) |
| 9359 | ··-·enable_strategy | 9364 | ··-·enable_strategy |
| 9360 | ··-·low_complexity | 9365 | ··-·low_complexity |
| 9361 | ··-·low_disruption | 9366 | ··-·low_disruption |
| 9362 | ··-·medium_severity | 9367 | ··-·medium_severity |
| 9363 | ··-·no_reboot_needed | 9368 | ··-·no_reboot_needed |
| 9364 | ··-·package_pam_apparmor_installed | 9369 | ··-·package_pam_apparmor_installed |
| 9365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9366 | [[packages]] | ||
| 9367 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 62567/68020 bytes (91.98%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037ef0:·3 | 00037ef0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 83 lines modified | Offset 15149, 83 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·204 | 0003b330:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b380:·3633·3332·223e·3c74·6162·6c65·2063·6c61··6332"><table·cla | |||
| 0003b390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b340:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3633·3332·223e··e"·id="idm6332"> | |||
| 0003b390:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b3a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b3b0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b3c0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b3d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3e0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3f0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b400:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b410:·6172·6765·743d·2223·6964·6d36·3333·3322··arget="#idm6333" | |||
| 0003b420:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b430:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b440:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b450:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b460:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b470:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b480:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4c0:·6522·2069·643d·2269·646d·3633·3333·223e··e"·id="idm6333"> | |||
| 0003b4d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b4f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b500:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b510:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b530:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b540:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b550:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b560:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b570:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b | 0003b580:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b590:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b5a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b5d0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b5e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b5f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b600:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b610:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b620:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b630:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b640:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b650:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b660:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b670:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b680:·4343·452d·3833·3238·392d·390a·2020·2d20··CCE-83289-9.··-· | |||
| 0003b690:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b6a0:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b6b0:·2d31·352d·3031·3034·3139·0a20·202d·204e··-15-010419.··-·N | |||
| 0003b6c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b6e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b6f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b700:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b710:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b720:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b730:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b740:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b750:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b760:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b770:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b480:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b490:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b4a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b500:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b510:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b520:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b530:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b540:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b550:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b560:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| Max diff block lines reached; 643050/654418 bytes (98.26%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 19 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 142 | ··package: |
| Offset 148, 19 lines modified | Offset 153, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 155 | ··-·low_complexity |
| 151 | ··-·low_disruption | 156 | ··-·low_disruption |
| 152 | ··-·medium_severity | 157 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 165 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 912, 14 lines modified | Offset 912, 19 lines modified | ||
| 912 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 912 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 913 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 913 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 914 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 914 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 915 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 915 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 916 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 916 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 917 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 917 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 918 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 918 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 920 | [[packages]] | ||
| 921 | name·=·"sudo" | ||
| 922 | version·=·"*" | ||
| 919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 923 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 924 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 925 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 926 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 927 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 924 | -·name:·Ensure·sudo·is·installed | 928 | -·name:·Ensure·sudo·is·installed |
| 925 | ··package: | 929 | ··package: |
| Offset 932, 19 lines modified | Offset 937, 14 lines modified | ||
| 932 | ··-·PCI-DSSv4-2.2.6 | 937 | ··-·PCI-DSSv4-2.2.6 |
| 933 | ··-·enable_strategy | 938 | ··-·enable_strategy |
| 934 | ··-·low_complexity | 939 | ··-·low_complexity |
| 935 | ··-·low_disruption | 940 | ··-·low_disruption |
| 936 | ··-·medium_severity | 941 | ··-·medium_severity |
| 937 | ··-·no_reboot_needed | 942 | ··-·no_reboot_needed |
| 938 | ··-·package_sudo_installed | 943 | ··-·package_sudo_installed |
| 939 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 940 | [[packages]] | ||
| 941 | name·=·"sudo" | ||
| 942 | version·=·"*" | ||
| 943 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 944 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 944 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 945 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 945 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 946 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 946 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 947 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 947 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 948 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 948 | #·Remediation·is·applicable·only·in·certain·platforms | 949 | #·Remediation·is·applicable·only·in·certain·platforms |
| 949 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 950 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9222, 14 lines modified | Offset 9222, 19 lines modified | ||
| 9222 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9222 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9223 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9223 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9224 | ·····················00232 | 9224 | ·····················00232 |
| 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9226 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9226 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9227 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9227 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9230 | [[packages]] | ||
| 9231 | name·=·"pam_apparmor" | ||
| 9232 | version·=·"*" | ||
| 9229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9234 | -·name:·Ensure·pam_apparmor·is·installed | 9238 | -·name:·Ensure·pam_apparmor·is·installed |
| 9235 | ··package: | 9239 | ··package: |
| Offset 9248, 19 lines modified | Offset 9253, 14 lines modified | ||
| 9248 | ··-·NIST-800-53-SC-7(21) | 9253 | ··-·NIST-800-53-SC-7(21) |
| 9249 | ··-·enable_strategy | 9254 | ··-·enable_strategy |
| 9250 | ··-·low_complexity | 9255 | ··-·low_complexity |
| 9251 | ··-·low_disruption | 9256 | ··-·low_disruption |
| 9252 | ··-·medium_severity | 9257 | ··-·medium_severity |
| 9253 | ··-·no_reboot_needed | 9258 | ··-·no_reboot_needed |
| 9254 | ··-·package_pam_apparmor_installed | 9259 | ··-·package_pam_apparmor_installed |
| 9255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9256 | [[packages]] | ||
| 9257 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 52126/57585 bytes (90.52%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037f00:·2d31·3 | 00037f00:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 83 lines modified | Offset 15135, 83 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·204 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3633·3332·223e·3c74·6162·6c65·2063··dm6332"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b | 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2a0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b330:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | |||
| 0003b340:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003b350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b3b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3e0:·7073·6522·2069·643d·2269·646d·3633·3333··pse"·id="idm6333 | |||
| 0003b3f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b400:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b410:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b420:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b430:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b440:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b450:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b460:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b470:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b490:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b4a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b4b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b4c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b4d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b4e0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b4f0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b500:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b510:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b520:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b530:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b540:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b550:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b560:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b570:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b580:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b590:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b5a0:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b5b0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b5c0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b5d0:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b5e0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b5f0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b600:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b610:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b620:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b630:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b640:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b650:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b660:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b670:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b680:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b690:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3833·3238··gs:.··-·CCE-8328 | |||
| 0003b460:·392d·390a·2020·2d20·434a·4953·2d35·2e31··9-9.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b480:·5449·472d·534c·4553·2d31·352d·3031·3034··TIG-SLES-15-0104 | |||
| 0003b490:·3139·0a20·202d·204e·4953·542d·3830·302d··19.··-·NIST-800- | |||
| Max diff block lines reached; 542330/553698 bytes (97.95%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 19 lines modified | Offset 150, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 909, 14 lines modified | Offset 909, 19 lines modified | ||
| 909 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 909 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 910 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 910 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 911 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 911 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 912 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 912 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 913 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 913 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 914 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 914 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 915 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 915 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 916 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 917 | [[packages]] | ||
| 918 | name·=·"sudo" | ||
| 919 | version·=·"*" | ||
| 916 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 920 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 917 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 921 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 918 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 922 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 919 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 923 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 920 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 924 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 921 | -·name:·Ensure·sudo·is·installed | 925 | -·name:·Ensure·sudo·is·installed |
| 922 | ··package: | 926 | ··package: |
| Offset 929, 19 lines modified | Offset 934, 14 lines modified | ||
| 929 | ··-·PCI-DSSv4-2.2.6 | 934 | ··-·PCI-DSSv4-2.2.6 |
| 930 | ··-·enable_strategy | 935 | ··-·enable_strategy |
| 931 | ··-·low_complexity | 936 | ··-·low_complexity |
| 932 | ··-·low_disruption | 937 | ··-·low_disruption |
| 933 | ··-·medium_severity | 938 | ··-·medium_severity |
| 934 | ··-·no_reboot_needed | 939 | ··-·no_reboot_needed |
| 935 | ··-·package_sudo_installed | 940 | ··-·package_sudo_installed |
| 936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 937 | [[packages]] | ||
| 938 | name·=·"sudo" | ||
| 939 | version·=·"*" | ||
| 940 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 941 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 942 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 942 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 943 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 943 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 944 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 944 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 945 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 945 | #·Remediation·is·applicable·only·in·certain·platforms | 946 | #·Remediation·is·applicable·only·in·certain·platforms |
| 946 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 947 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9219, 14 lines modified | Offset 9219, 19 lines modified | ||
| 9219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9220 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9220 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9221 | ·····················00232 | 9221 | ·····················00232 |
| 9222 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9222 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9223 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9223 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9227 | [[packages]] | ||
| 9228 | name·=·"pam_apparmor" | ||
| 9229 | version·=·"*" | ||
| 9226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9231 | -·name:·Ensure·pam_apparmor·is·installed | 9235 | -·name:·Ensure·pam_apparmor·is·installed |
| 9232 | ··package: | 9236 | ··package: |
| Offset 9245, 19 lines modified | Offset 9250, 14 lines modified | ||
| 9245 | ··-·NIST-800-53-SC-7(21) | 9250 | ··-·NIST-800-53-SC-7(21) |
| 9246 | ··-·enable_strategy | 9251 | ··-·enable_strategy |
| 9247 | ··-·low_complexity | 9252 | ··-·low_complexity |
| 9248 | ··-·low_disruption | 9253 | ··-·low_disruption |
| 9249 | ··-·medium_severity | 9254 | ··-·medium_severity |
| 9250 | ··-·no_reboot_needed | 9255 | ··-·no_reboot_needed |
| 9251 | ··-·package_pam_apparmor_installed | 9256 | ··-·package_pam_apparmor_installed |
| 9252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9253 | [[packages]] | ||
| 9254 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 45302/50771 bytes (89.23%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 83 lines modified | Offset 15162, 83 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·4 | 0003b400:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b410:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b420:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b430:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b440:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b450:·2220·6964·3d22·6964·6d36·3333·3222·3e3c··"·id="idm6332">< | |||
| 0003b460:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b470:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b480:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b450:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b550:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b560:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b570:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b580:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b590:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b5a0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b5b0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b5c0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b5d0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b5e0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b5f0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b600:·0a20·202d·2043·4345·2d38·3332·3839·2d39··.··-·CCE-83289-9 | |||
| 0003b610:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b620:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b630:·2d53·4c45·532d·3135·2d30·3130·3431·390a··-SLES-15-010419. | |||
| 0003b640:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b650:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b660:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b670:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b680:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b6a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b6b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b6c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b6d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b490:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b4b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b4c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b4d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b75 | 0003b4e0:·7267·6574·3d22·2369·646d·3633·3333·2220··rget="#idm6333"· | ||
| 0003b76 | 0003b4f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b500:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b780 | 0003b510:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b79 | 0003b520:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003b530:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b540:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b7c0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b7d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b7e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b7f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b800:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b810:·3333·3322·3e3c·7072·653e·3c63·6f64·653e··333"><pre><code> | |||
| 0003b820:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b830:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b | 0003b550:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b560:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b570:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b580:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b590:·2220·6964·3d22·6964·6d36·3333·3322·3e3c··"·id="idm6333">< | |||
| 0003b5a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b5c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b5d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b610:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b640:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b660:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b670:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b680:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b690:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b6a0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b6b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b6c0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b6d0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b6e0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b6f0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b700:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| Max diff block lines reached; 769436/780666 bytes (98.56%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 19 lines modified | ||
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 139 | ··package: | 143 | ··package: |
| Offset 149, 19 lines modified | Offset 154, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 166 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1020, 14 lines modified | Offset 1020, 19 lines modified | ||
| 1020 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1020 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1021 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1021 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1022 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1022 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1023 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1023 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1024 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1024 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1025 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1025 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1026 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1026 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1027 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1028 | [[packages]] | ||
| 1029 | name·=·"sudo" | ||
| 1030 | version·=·"*" | ||
| 1027 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1031 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1028 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1032 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1029 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1033 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1030 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1034 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1031 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1035 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1032 | -·name:·Ensure·sudo·is·installed | 1036 | -·name:·Ensure·sudo·is·installed |
| 1033 | ··package: | 1037 | ··package: |
| Offset 1040, 19 lines modified | Offset 1045, 14 lines modified | ||
| 1040 | ··-·PCI-DSSv4-2.2.6 | 1045 | ··-·PCI-DSSv4-2.2.6 |
| 1041 | ··-·enable_strategy | 1046 | ··-·enable_strategy |
| 1042 | ··-·low_complexity | 1047 | ··-·low_complexity |
| 1043 | ··-·low_disruption | 1048 | ··-·low_disruption |
| 1044 | ··-·medium_severity | 1049 | ··-·medium_severity |
| 1045 | ··-·no_reboot_needed | 1050 | ··-·no_reboot_needed |
| 1046 | ··-·package_sudo_installed | 1051 | ··-·package_sudo_installed |
| 1047 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1048 | [[packages]] | ||
| 1049 | name·=·"sudo" | ||
| 1050 | version·=·"*" | ||
| 1051 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1052 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1052 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1053 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1053 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1054 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1054 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1055 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1055 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1056 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1056 | #·Remediation·is·applicable·only·in·certain·platforms | 1057 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1057 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1058 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 9330, 14 lines modified | Offset 9330, 19 lines modified | ||
| 9330 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- | 9330 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370-GPOS-00155,·SRG-OS-000480- |
| 9331 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- | 9331 | References:··········GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS- |
| 9332 | ·····················00232 | 9332 | ·····················00232 |
| 9333 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 9333 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 9334 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 9334 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 9335 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 9335 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 9336 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 9336 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 9337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9338 | [[packages]] | ||
| 9339 | name·=·"pam_apparmor" | ||
| 9340 | version·=·"*" | ||
| 9337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9342 | -·name:·Ensure·pam_apparmor·is·installed | 9346 | -·name:·Ensure·pam_apparmor·is·installed |
| 9343 | ··package: | 9347 | ··package: |
| Offset 9356, 19 lines modified | Offset 9361, 14 lines modified | ||
| 9356 | ··-·NIST-800-53-SC-7(21) | 9361 | ··-·NIST-800-53-SC-7(21) |
| 9357 | ··-·enable_strategy | 9362 | ··-·enable_strategy |
| 9358 | ··-·low_complexity | 9363 | ··-·low_complexity |
| 9359 | ··-·low_disruption | 9364 | ··-·low_disruption |
| 9360 | ··-·medium_severity | 9365 | ··-·medium_severity |
| 9361 | ··-·no_reboot_needed | 9366 | ··-·no_reboot_needed |
| 9362 | ··-·package_pam_apparmor_installed | 9367 | ··-·package_pam_apparmor_installed |
| 9363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9364 | [[packages]] | ||
| 9365 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 58975/64444 bytes (91.51%) of diff not shown. | |||
| Offset 14324, 16 lines modified | Offset 14324, 16 lines modified | ||
| 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fa0:·2028·6173·206f·6620·3230·323 | 00037fa0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037fb0:·3 | 00037fb0:·3039·290a·2020·2020·2020·2020·2020·2020··09).············ | ||
| 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 21888, 198 lines modified | Offset 21888, 198 lines modified | ||
| 000557f0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 000557f0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 00055800:·3338·3822·2074·6162·696e·6465·783d·2230··388"·tabindex="0 | 00055800:·3338·3822·2074·6162·696e·6465·783d·2230··388"·tabindex="0 | ||
| 00055810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00055810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00055820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00055820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00055830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00055830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00055840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00055840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00055850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00055850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00055860:·6961·7469·6f6e·204 | 00055860:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00055870:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00055880:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00055890:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000558a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000558b0:·2069·643d·2269·646d·3131·3338·3822·3e3c···id="idm11388">< | |||
| 000558c0:·7072·653e·3c63·6f64·653e·0a5b·6375·7374··pre><code>.[cust | |||
| 000558d0:·6f6d·697a·6174·696f·6e73·2e73·6572·7669··omizations.servi | |||
| 000558e0:·6365·735d·0a6d·6173·6b65·6420·3d20·5b22··ces].masked·=·[" | |||
| 000558f0:·6465·6275·672d·7368·656c·6c22·5d0a·3c2f··debug-shell"].</ | |||
| 00055900:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00055910:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00055920:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00055930:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00055940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00055950:·2369·646d·3131·3338·3922·2074·6162·696e··#idm11389"·tabin | |||
| 00055960:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00055970:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00055980:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00055990:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 000559a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 000559b0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 000559c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 000559d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000559e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000559f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00055a00:·2269·646d·3131·3338·3922·3e3c·7461·626c··"idm11389"><tabl | |||
| 00055a10:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00055a20:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00055a30:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00055a40:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00055a50:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00055a60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00055a70:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00055a80:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00055a90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00055aa0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00055ab0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00055ac0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00055ad0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00055ae0:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00055af0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00055870:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00055880:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00055890:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000558a0:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 000558b0:·3338·3822·3e3c·7461·626c·6520·636c·6173··388"><table·clas | |||
| 000558c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000558d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000558e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000558f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00055900:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00055910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00055920:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00055930:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00055940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00055950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00055960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00055970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00055980:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 00055990:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000559a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000559b0:·6e61·6d65·3a20·4469·7361·626c·6520·6465··name:·Disable·de | |||
| 000559c0:·6275·672d·7368·656c·6c20·5379·7374·656d··bug-shell·System | |||
| 000559d0:·4420·5365·7276·6963·6520·2d20·436f·6c6c··D·Service·-·Coll | |||
| 000559e0:·6563·7420·7379·7374·656d·6420·5365·7276··ect·systemd·Serv | |||
| 000559f0:·6963·6573·2050·7265·7365·6e74·2069·6e0a··ices·Present·in. | |||
| 00055a00:·2020·2020·7468·6520·5379·7374·656d·0a20······the·System.· | |||
| 00055a10:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | |||
| 00055a20:·2e63·6f6d·6d61·6e64·3a20·7379·7374·656d··.command:·system | |||
| 00055a30:·6374·6c20·2d71·206c·6973·742d·756e·6974··ctl·-q·list-unit | |||
| 00055a40:·2d66·696c·6573·202d·2d74·7970·6520·7365··-files·--type·se | |||
| 00055a50:·7276·6963·650a·2020·7265·6769·7374·6572··rvice.··register | |||
| 00055a60:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 00055a70:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | |||
| 00055a80:·2066·616c·7365·0a20·2066·6169·6c65·645f···false.··failed_ | |||
| 00055a90:·7768·656e·3a20·7365·7276·6963·655f·6578··when:·service_ex | |||
| 00055aa0:·6973·7473·2e72·6320·6e6f·7420·696e·205b··ists.rc·not·in·[ | |||
| 00055ab0:·302c·2031·5d0a·2020·6368·6563·6b5f·6d6f··0,·1].··check_mo | |||
| 00055ac0:·6465·3a20·6661·6c73·650a·2020·7768·656e··de:·false.··when | |||
| 00055ad0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 00055ae0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00055af0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00055b00:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00055b10:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00055b20:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00055b30:·2020·2d20·4343·452d·3931·3432·312d·380a····-·CCE-91421-8. | |||
| 00055b40:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 00055b50:·2d33·2e34·2e35·0a20·202d·204e·4953·542d··-3.4.5.··-·NIST- | |||
| 00055b60:·3830·302d·3533·2d43·4d2d·360a·2020·2d20··800-53-CM-6.··-· | |||
| 00055b70:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 00055b80:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00055b90:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00055ba0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00055bb0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00055bc0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00055bd0:·2020·2d20·7365·7276·6963·655f·6465·6275····-·service_debu | |||
| 00055be0:·672d·7368·656c·6c5f·6469·7361·626c·6564··g-shell_disabled | |||
| 00055b | 00055b00:·6f64·653e·2d20·6e61·6d65·3a20·4469·7361··ode>-·name:·Disa | ||
| 00055 | 00055b10:·626c·6520·6465·6275·672d·7368·656c·6c20··ble·debug-shell· | ||
| 00055 | 00055b20:·5379·7374·656d·4420·5365·7276·6963·6520··SystemD·Service· | ||
| 00055c20:·456e·7375·7265·2064·6562·7567·2d73·6865··Ensure·debug-she | |||
| 00055 | 00055b30:·2d20·436f·6c6c·6563·7420·7379·7374·656d··-·Collect·system | ||
| Max diff block lines reached; 318454/345694 bytes (92.12%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1638, 14 lines modified | Offset 1638, 18 lines modified | ||
| 1638 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1638 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1639 | ····················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a) | 1639 | ····················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a) |
| 1640 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1), | 1640 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1), |
| 1641 | ····················164.310(d)(2)(iii) | 1641 | ····················164.310(d)(2)(iii) |
| 1642 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1642 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1643 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1643 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1644 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1644 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1646 | [customizations.services] | ||
| 1647 | masked·=·["debug-shell"] | ||
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1646 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1649 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1647 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1650 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1648 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1651 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1649 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1652 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1650 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1653 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1651 | ····the·System | 1654 | ····the·System |
| Offset 1719, 18 lines modified | Offset 1723, 14 lines modified | ||
| 1719 | ··-·NIST-800-53-CM-6 | 1723 | ··-·NIST-800-53-CM-6 |
| 1720 | ··-·disable_strategy | 1724 | ··-·disable_strategy |
| 1721 | ··-·low_complexity | 1725 | ··-·low_complexity |
| 1722 | ··-·low_disruption | 1726 | ··-·low_disruption |
| 1723 | ··-·medium_severity | 1727 | ··-·medium_severity |
| 1724 | ··-·no_reboot_needed | 1728 | ··-·no_reboot_needed |
| 1725 | ··-·service_debug-shell_disabled | 1729 | ··-·service_debug-shell_disabled |
| 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1727 | [customizations.services] | ||
| 1728 | masked·=·["debug-shell"] | ||
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1731 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1731 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1732 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1732 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1733 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1733 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1734 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1734 | #·Remediation·is·applicable·only·in·certain·platforms | 1735 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1735 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1736 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3213, 14 lines modified | Offset 3213, 18 lines modified | ||
| 3213 | ····························A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 3213 | ····························A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 3214 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 3214 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 3215 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 3215 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 3216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 3216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 3217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010240 | 3217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010240 |
| 3218 | ·············_\x8c_\x8i_\x8s············1.1.23 | 3218 | ·············_\x8c_\x8i_\x8s············1.1.23 |
| 3219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234823r854187_rule | 3219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234823r854187_rule |
| 3220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3221 | [customizations.services] | ||
| 3222 | masked·=·["autofs"] | ||
| 3220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3225 | -·name:·Gather·the·package·facts | 3228 | -·name:·Gather·the·package·facts |
| 3226 | ··package_facts: | 3229 | ··package_facts: |
| Offset 3331, 18 lines modified | Offset 3335, 14 lines modified | ||
| 3331 | ··-·NIST-800-53-MP-7 | 3335 | ··-·NIST-800-53-MP-7 |
| 3332 | ··-·disable_strategy | 3336 | ··-·disable_strategy |
| 3333 | ··-·low_complexity | 3337 | ··-·low_complexity |
| 3334 | ··-·low_disruption | 3338 | ··-·low_disruption |
| 3335 | ··-·medium_severity | 3339 | ··-·medium_severity |
| 3336 | ··-·no_reboot_needed | 3340 | ··-·no_reboot_needed |
| 3337 | ··-·service_autofs_disabled | 3341 | ··-·service_autofs_disabled |
| 3338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3339 | [customizations.services] | ||
| 3340 | masked·=·["autofs"] | ||
| 3341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3346 | #·Remediation·is·applicable·only·in·certain·platforms | 3347 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3347 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·autofs·);·then | 3348 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·autofs·);·then |
| Offset 5135, 14 lines modified | Offset 5135, 18 lines modified | ||
| 5135 | ····························A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 5135 | ····························A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 5136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 5136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 5137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 5137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 5138 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1.1 | 5138 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1.1 |
| 5139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000269-GPOS-00103,·SRG-OS-000480-GPOS-00227 | 5139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000269-GPOS-00103,·SRG-OS-000480-GPOS-00227 |
| 5140 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-040190 | 5140 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-040190 |
| 5141 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-235003r622137_rule | 5141 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-235003r622137_rule |
| 5142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5143 | [customizations.services] | ||
| 5144 | masked·=·["kdump"] | ||
| 5142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 5149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 5147 | -·name:·Disable·KDump·Kernel·Crash·Analyzer·(kdump)·-·Collect·systemd·Services·Present | 5150 | -·name:·Disable·KDump·Kernel·Crash·Analyzer·(kdump)·-·Collect·systemd·Services·Present |
| 5148 | ····in·the·System | 5151 | ····in·the·System |
| Offset 5224, 18 lines modified | Offset 5228, 14 lines modified | ||
| 5224 | ··-·NIST-800-53-CM-7(b) | 5228 | ··-·NIST-800-53-CM-7(b) |
| 5225 | ··-·disable_strategy | 5229 | ··-·disable_strategy |
| 5226 | ··-·low_complexity | 5230 | ··-·low_complexity |
| 5227 | ··-·low_disruption | 5231 | ··-·low_disruption |
| 5228 | ··-·medium_severity | 5232 | ··-·medium_severity |
| 5229 | ··-·no_reboot_needed | 5233 | ··-·no_reboot_needed |
| 5230 | ··-·service_kdump_disabled | 5234 | ··-·service_kdump_disabled |
| 5231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5232 | [customizations.services] | ||
| 5233 | masked·=·["kdump"] | ||
| 5234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 5235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 5235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 5239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| Max diff block lines reached; 19552/25822 bytes (75.72%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3234·2d31·312d·3039·290a···of·2024-11-09). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16959, 83 lines modified | Offset 16959, 83 lines modified | ||
| 000423e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000423e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000423f0:·2369·646d·3633·3332·2220·7461·6269·6e64··#idm6332"·tabind | 000423f0:·2369·646d·3633·3332·2220·7461·6269·6e64··#idm6332"·tabind | ||
| 00042400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00042400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00042410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00042410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00042420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00042420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00042430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00042430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00042440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00042440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00042450:·5265·6d65·6469·6174·696f·6e20·4 | 00042450:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00042460:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00042470:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00042480:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00042490:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000424a0:·6964·6d36·3333·3222·3e3c·7461·626c·6520··idm6332"><table· | |||
| 000424b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000424c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000424d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000424e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000424f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00042500:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00042510:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00042520:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00042530:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00042540:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00042550:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00042560:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00042 | 00042460:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 00042470:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00042480:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00042490:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000424a0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 000424b0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 000424c0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000424d0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 000424e0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 000424f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00042500:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00042510:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00042520:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00042530:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 00042540:·3333·2220·7461·6269·6e64·6578·3d22·3022··33"·tabindex="0" | |||
| 00042550:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00042560:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00042570:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00042580:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00042590:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000425a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000425b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000425c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000425d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000425e0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 000425f0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00042600:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00042610:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00042620:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00042630:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00042640:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00042650:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00042660:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00042670:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00042680:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00042690:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00042 | 000426a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 000426b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 000426c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 000426d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000426e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 000426f0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 00042700:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00042710:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00042720:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 00042730:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 00042740:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00042750:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 00042760:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00042770:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00042780:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00042790:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 000427a0:·202d·2043·4345·2d38·3332·3839·2d39·0a20···-·CCE-83289-9.· | |||
| 000427b0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 000427c0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 000427d0:·4c45·532d·3135·2d30·3130·3431·390a·2020··LES-15-010419.·· | |||
| 000427e0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 000427f0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 00042800:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 00042810:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 00042820:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 00042830:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 00042840:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00042850:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00042860:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00042870:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00042880:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 00042890:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 00042590:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 000425a0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 000425b0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 000425c0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 000425d0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 000425e0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 000425f0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 00042600:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00042610:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00042620:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00042630:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00042640:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00042650:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 00042660:·3839·2d39·0a20·202d·2043·4a49·532d·352e··89-9.··-·CJIS-5. | |||
| 00042670:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00042680:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 00042690:·3431·390a·2020·2d20·4e49·5354·2d38·3030··419.··-·NIST-800 | |||
| 000426a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| Max diff block lines reached; 319228/330458 bytes (96.60%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 525, 14 lines modified | Offset 525, 19 lines modified | ||
| 525 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 525 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 527 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 527 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 528 | ·············_\x8c_\x8i_\x8s············1.4.1 | 528 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 529 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 529 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 530 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 530 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 533 | [[packages]] | ||
| 534 | name·=·"aide" | ||
| 535 | version·=·"*" | ||
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 533 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 534 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 535 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 536 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 537 | -·name:·Ensure·aide·is·installed | 541 | -·name:·Ensure·aide·is·installed |
| 538 | ··package: | 542 | ··package: |
| Offset 548, 19 lines modified | Offset 553, 14 lines modified | ||
| 548 | ··-·PCI-DSSv4-11.5.2 | 553 | ··-·PCI-DSSv4-11.5.2 |
| 549 | ··-·enable_strategy | 554 | ··-·enable_strategy |
| 550 | ··-·low_complexity | 555 | ··-·low_complexity |
| 551 | ··-·low_disruption | 556 | ··-·low_disruption |
| 552 | ··-·medium_severity | 557 | ··-·medium_severity |
| 553 | ··-·no_reboot_needed | 558 | ··-·no_reboot_needed |
| 554 | ··-·package_aide_installed | 559 | ··-·package_aide_installed |
| 555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 556 | [[packages]] | ||
| 557 | name·=·"aide" | ||
| 558 | version·=·"*" | ||
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 564 | #·Remediation·is·applicable·only·in·certain·platforms | 565 | #·Remediation·is·applicable·only·in·certain·platforms |
| 565 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 566 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 2298, 14 lines modified | Offset 2298, 19 lines modified | ||
| 2298 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2298 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2299 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2299 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2300 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2300 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2301 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2301 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2302 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 2302 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 2303 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2303 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2306 | [[packages]] | ||
| 2307 | name·=·"sudo" | ||
| 2308 | version·=·"*" | ||
| 2305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2310 | -·name:·Ensure·sudo·is·installed | 2314 | -·name:·Ensure·sudo·is·installed |
| 2311 | ··package: | 2315 | ··package: |
| Offset 2318, 19 lines modified | Offset 2323, 14 lines modified | ||
| 2318 | ··-·PCI-DSSv4-2.2.6 | 2323 | ··-·PCI-DSSv4-2.2.6 |
| 2319 | ··-·enable_strategy | 2324 | ··-·enable_strategy |
| 2320 | ··-·low_complexity | 2325 | ··-·low_complexity |
| 2321 | ··-·low_disruption | 2326 | ··-·low_disruption |
| 2322 | ··-·medium_severity | 2327 | ··-·medium_severity |
| 2323 | ··-·no_reboot_needed | 2328 | ··-·no_reboot_needed |
| 2324 | ··-·package_sudo_installed | 2329 | ··-·package_sudo_installed |
| 2325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2326 | [[packages]] | ||
| 2327 | name·=·"sudo" | ||
| 2328 | version·=·"*" | ||
| 2329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 2330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 2330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2334 | #·Remediation·is·applicable·only·in·certain·platforms | 2335 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2335 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 2336 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 11768, 14 lines modified | Offset 11768, 19 lines modified | ||
| 11768 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 11768 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 11769 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 11769 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 11770 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 11770 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 11771 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 11771 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 11772 | ·············_\x8c_\x8i_\x8s············4.2.4 | 11772 | ·············_\x8c_\x8i_\x8s············4.2.4 |
| 11773 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 11773 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 11774 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 11774 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 11775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11776 | [[packages]] | ||
| 11777 | name·=·"logrotate" | ||
| 11778 | version·=·"*" | ||
| 11775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 11779 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 11776 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 11780 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 11777 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 11781 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 11778 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 11782 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 11779 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 11783 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 11780 | -·name:·Ensure·logrotate·is·installed | 11784 | -·name:·Ensure·logrotate·is·installed |
| 11781 | ··package: | 11785 | ··package: |
| Offset 11789, 19 lines modified | Offset 11794, 14 lines modified | ||
| 11789 | ··-·PCI-DSSv4-10.5.1 | 11794 | ··-·PCI-DSSv4-10.5.1 |
| 11790 | ··-·enable_strategy | 11795 | ··-·enable_strategy |
| 11791 | ··-·low_complexity | 11796 | ··-·low_complexity |
| 11792 | ··-·low_disruption | 11797 | ··-·low_disruption |
| 11793 | ··-·medium_severity | 11798 | ··-·medium_severity |
| 11794 | ··-·no_reboot_needed | 11799 | ··-·no_reboot_needed |
| 11795 | ··-·package_logrotate_installed | 11800 | ··-·package_logrotate_installed |
| 11796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11797 | [[packages]] | ||
| 11798 | name·=·"logrotate" | ||
| Max diff block lines reached; 23120/28598 bytes (80.84%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037f00:·323 | 00037f00:·3234·2d31·312d·3039·290a·2020·2020·2020··24-11-09).······ | ||
| 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15096, 83 lines modified | Offset 15096, 83 lines modified | ||
| 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | ||
| 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003aff0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b000:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b010:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b020:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b030:·643d·2269·646d·3633·3332·223e·3c74·6162··d="idm6332"><tab | |||
| 0003b040:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b050:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b060:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b070:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b080:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b090:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b0e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b0f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003 | 0003aff0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003b000:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b010:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b020:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b030:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b040:·3633·3332·223e·3c70·7265·3e3c·636f·6465··6332"><pre><code | |||
| 0003b050:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b060:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b070:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b080:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b090:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b0a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b0b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b0c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b0d0:·6d36·3333·3322·2074·6162·696e·6465·783d··m6333"·tabindex= | |||
| 0003b0e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b0f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b100:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b110:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b120:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b130:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b140:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b150:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b160:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b170:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b180:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | |||
| 0003b190:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b1a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b1b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b1c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b1d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b200:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b210:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b220:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b | 0003b230:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b240:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b250:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b260:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b270:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b280:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b290:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b2a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b2b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b2c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b2d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b2e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b2f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b300:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b310:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b320:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b330:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b340:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b350:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b360:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b370:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b380:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b390:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b3a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b3b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b3c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b3d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b3e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b3f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b400:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b410:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b420:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b120:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b130:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b140:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b150:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b160:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b170:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b180:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b190:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b1a0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b1b0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b1c0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b1d0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b1e0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b1f0:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b200:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b210:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b220:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b230:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| Max diff block lines reached; 52850/64080 bytes (82.48%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ··············(SLES)·for·SAP·Applications·15 | 42 | ··············(SLES)·for·SAP·Applications·15 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 116 | ·············_\x8c_\x8i_\x8s············1.4.1 | 116 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 130 | ··package: |
| Offset 136, 19 lines modified | Offset 141, 14 lines modified | ||
| 136 | ··-·PCI-DSSv4-11.5.2 | 141 | ··-·PCI-DSSv4-11.5.2 |
| 137 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 138 | ··-·low_complexity | 143 | ··-·low_complexity |
| 139 | ··-·low_disruption | 144 | ··-·low_disruption |
| 140 | ··-·medium_severity | 145 | ··-·medium_severity |
| 141 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 142 | ··-·package_aide_installed | 147 | ··-·package_aide_installed |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8764, 14 lines modified | Offset 8764, 19 lines modified | ||
| 8764 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 8764 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 8765 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 8765 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 8766 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 8766 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 8767 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 8767 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 8768 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 8768 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 8769 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 8769 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 8770 | ·············_\x8c_\x8i_\x8s············4.2.1.1 | 8770 | ·············_\x8c_\x8i_\x8s············4.2.1.1 |
| 8771 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8772 | [[packages]] | ||
| 8773 | name·=·"rsyslog" | ||
| 8774 | version·=·"*" | ||
| 8771 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8772 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8776 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8773 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8777 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8774 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8778 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8775 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8779 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8776 | -·name:·Ensure·rsyslog·is·installed | 8780 | -·name:·Ensure·rsyslog·is·installed |
| 8777 | ··package: | 8781 | ··package: |
| Offset 8783, 19 lines modified | Offset 8788, 14 lines modified | ||
| 8783 | ··-·NIST-800-53-CM-6(a) | 8788 | ··-·NIST-800-53-CM-6(a) |
| 8784 | ··-·enable_strategy | 8789 | ··-·enable_strategy |
| 8785 | ··-·low_complexity | 8790 | ··-·low_complexity |
| 8786 | ··-·low_disruption | 8791 | ··-·low_disruption |
| 8787 | ··-·medium_severity | 8792 | ··-·medium_severity |
| 8788 | ··-·no_reboot_needed | 8793 | ··-·no_reboot_needed |
| 8789 | ··-·package_rsyslog_installed | 8794 | ··-·package_rsyslog_installed |
| 8790 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8791 | [[packages]] | ||
| 8792 | name·=·"rsyslog" | ||
| 8793 | version·=·"*" | ||
| 8794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8796 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8797 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8798 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8799 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8799 | #·Remediation·is·applicable·only·in·certain·platforms | 8800 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8800 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 8801 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8848, 14 lines modified | Offset 8848, 19 lines modified | ||
| 8848 | Severity: ···medium | 8848 | Severity: ···medium |
| 8849 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_iptables_installed | 8849 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_iptables_installed |
| 8850 | Identifiers:·CCE-91244-4 | 8850 | Identifiers:·CCE-91244-4 |
| 8851 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8851 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8852 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-1.4.1 | 8852 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-1.4.1 |
| 8853 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 8853 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 8854 | ·············_\x8c_\x8i_\x8s····3.5.3.1.1 | 8854 | ·············_\x8c_\x8i_\x8s····3.5.3.1.1 |
| 8855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8856 | [[packages]] | ||
| 8857 | name·=·"iptables" | ||
| 8858 | version·=·"*" | ||
| 8855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8856 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8857 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8858 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8859 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8860 | -·name:·Ensure·iptables·is·installed | 8864 | -·name:·Ensure·iptables·is·installed |
| 8861 | ··package: | 8865 | ··package: |
| Offset 8869, 19 lines modified | Offset 8874, 14 lines modified | ||
| 8869 | ··-·PCI-DSS-Req-1.4.1 | 8874 | ··-·PCI-DSS-Req-1.4.1 |
| 8870 | ··-·enable_strategy | 8875 | ··-·enable_strategy |
| 8871 | ··-·low_complexity | 8876 | ··-·low_complexity |
| 8872 | ··-·low_disruption | 8877 | ··-·low_disruption |
| 8873 | ··-·medium_severity | 8878 | ··-·medium_severity |
| 8874 | ··-·no_reboot_needed | 8879 | ··-·no_reboot_needed |
| 8875 | ··-·package_iptables_installed | 8880 | ··-·package_iptables_installed |
| 8876 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8877 | [[packages]] | ||
| 8878 | name·=·"iptables" | ||
| Max diff block lines reached; 4944/10505 bytes (47.06%) of diff not shown. | |||
| Offset 14300, 16 lines modified | Offset 14300, 16 lines modified | ||
| 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e30:·2d31·3 | 00037e30:·2d31·312d·3039·290a·2020·2020·2020·2020··-11-09).········ | ||
| 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e90:·3230·323 | 00037e90:·3230·3234·2d31·312d·3039·290a·2020·2020··2024-11-09).···· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 27247, 79 lines modified | Offset 27247, 79 lines modified | ||
| 0006a6e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0006a6e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0006a6f0:·2369·646d·3137·3335·3322·2074·6162·696e··#idm17353"·tabin | 0006a6f0:·2369·646d·3137·3335·3322·2074·6162·696e··#idm17353"·tabin | ||
| 0006a700:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0006a700:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0006a710:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0006a710:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0006a720:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0006a720:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0006a730:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0006a730:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0006a740:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0006a740:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0006a750:·3e52·656d·6564·6961·7469·6f6e·204 | 0006a750:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0006a760:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0006a770:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006a780:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006a790:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006a7a0:·2269·646d·3137·3335·3322·3e3c·7461·626c··"idm17353"><tabl | |||
| 0006a7b0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0006a7c0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0006a7d0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0006a7e0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0006a7f0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0006a800:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0006a810:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0006a | 0006a760:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0006a770:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0006a780:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0006a790:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0006a7a0:·6c61·7073·6522·2069·643d·2269·646d·3137··lapse"·id="idm17 | |||
| 0006a7b0:·3335·3322·3e3c·7072·653e·3c63·6f64·653e··353"><pre><code> | |||
| 0006a7c0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0006a7d0:·6d65·203d·2022·7273·7973·6c6f·6722·0a76··me·=·"rsyslog".v | |||
| 0006a7e0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0006a7f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0006a800:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0006a810:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0006a820:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0006a830:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0006a840:·6964·6d31·3733·3534·2220·7461·6269·6e64··idm17354"·tabind | |||
| 0006a850:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0006a860:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0006a870:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0006a880:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0006a890:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0006a8a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0006a8b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0006a8c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0006a8d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0006a8e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0006a8f0:·6964·6d31·3733·3534·223e·3c74·6162·6c65··idm17354"><table | |||
| 0006a900:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006a910:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006a920:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006a930:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006a940:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006a950:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0006a960:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006a970:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006a980:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006a990:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0006a9a0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0006a9b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0006a9c0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0006a | 0006a9d0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0006a9e0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0006a9f0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0006aa00:·2072·7379·736c·6f67·2069·7320·696e·7374···rsyslog·is·inst | |||
| 0006aa10:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0006aa20:·0a20·2020·206e·616d·653a·2072·7379·736c··.····name:·rsysl | |||
| 0006aa30:·6f67·0a20·2020·2073·7461·7465·3a20·7072··og.····state:·pr | |||
| 0006aa40:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0006aa50:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0006aa60:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0006aa70:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0006aa80:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0006aa90:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0006aaa0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0006aab0:·4343·452d·3931·3136·312d·300a·2020·2d20··CCE-91161-0.··-· | |||
| 0006aac0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0006aad0:·2861·290a·2020·2d20·656e·6162·6c65·5f73··(a).··-·enable_s | |||
| 0006aae0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0006aaf0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0006ab00:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0006ab10:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0006ab20:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0006ab30:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0006ab40:·6765·5f72·7379·736c·6f67·5f69·6e73·7461··ge_rsyslog_insta | |||
| 0006a840:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0006a850:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0006a860:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0006a870:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0006a880:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0006a890:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0006a8a0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0006a8b0:·6520·7273·7973·6c6f·6720·6973·2069·6e73··e·rsyslog·is·ins | |||
| 0006a8c0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0006a8d0:·3a0a·2020·2020·6e61·6d65·3a20·7273·7973··:.····name:·rsys | |||
| 0006a8e0:·6c6f·670a·2020·2020·7374·6174·653a·2070··log.····state:·p | |||
| 0006a8f0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0006a900:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0006a910:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0006a920:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0006a930:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0006a940:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0006a950:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0006a960:·2043·4345·2d39·3131·3631·2d30·0a20·202d···CCE-91161-0.··- | |||
| 0006a970:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0006a980:·3628·6129·0a20·202d·2065·6e61·626c·655f··6(a).··-·enable_ | |||
| 0006a990:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0006a9a0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0006a9b0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0006a9c0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0006a9d0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0006a9e0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0006a9f0:·6167·655f·7273·7973·6c6f·675f·696e·7374··age_rsyslog_inst | |||
| Max diff block lines reached; 153892/164570 bytes (93.51%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 3160, 14 lines modified | Offset 3160, 19 lines modified | ||
| 3160 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3160 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3161 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3161 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3162 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3162 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3163 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 3163 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 3164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 3164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 3165 | ····························00227 | 3165 | ····························00227 |
| 3166 | ·············_\x8c_\x8i_\x8s············4.2.1.1 | 3166 | ·············_\x8c_\x8i_\x8s············4.2.1.1 |
| 3167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3168 | [[packages]] | ||
| 3169 | name·=·"rsyslog" | ||
| 3170 | version·=·"*" | ||
| 3167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3172 | -·name:·Ensure·rsyslog·is·installed | 3176 | -·name:·Ensure·rsyslog·is·installed |
| 3173 | ··package: | 3177 | ··package: |
| Offset 3179, 19 lines modified | Offset 3184, 14 lines modified | ||
| 3179 | ··-·NIST-800-53-CM-6(a) | 3184 | ··-·NIST-800-53-CM-6(a) |
| 3180 | ··-·enable_strategy | 3185 | ··-·enable_strategy |
| 3181 | ··-·low_complexity | 3186 | ··-·low_complexity |
| 3182 | ··-·low_disruption | 3187 | ··-·low_disruption |
| 3183 | ··-·medium_severity | 3188 | ··-·medium_severity |
| 3184 | ··-·no_reboot_needed | 3189 | ··-·no_reboot_needed |
| 3185 | ··-·package_rsyslog_installed | 3190 | ··-·package_rsyslog_installed |
| 3186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3187 | [[packages]] | ||
| 3188 | name·=·"rsyslog" | ||
| 3189 | version·=·"*" | ||
| 3190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3195 | #·Remediation·is·applicable·only·in·certain·platforms | 3196 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3196 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3197 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3232, 14 lines modified | Offset 3232, 18 lines modified | ||
| 3232 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 3232 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 3233 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 3233 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 3234 | ····························A.15.2.1,·A.15.2.2,·A.17.2.1 | 3234 | ····························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 3235 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 3235 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 3236 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 3236 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 3237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 3237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 3238 | ·············_\x8c_\x8i_\x8s············4.2.1.2 | 3238 | ·············_\x8c_\x8i_\x8s············4.2.1.2 |
| 3239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3240 | [customizations.services] | ||
| 3241 | enabled·=·["rsyslog"] | ||
| 3239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3244 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 3247 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 3245 | ··block: | 3248 | ··block: |
| Offset 3263, 18 lines modified | Offset 3267, 14 lines modified | ||
| 3263 | ··-·NIST-800-53-CM-6(a) | 3267 | ··-·NIST-800-53-CM-6(a) |
| 3264 | ··-·enable_strategy | 3268 | ··-·enable_strategy |
| 3265 | ··-·low_complexity | 3269 | ··-·low_complexity |
| 3266 | ··-·low_disruption | 3270 | ··-·low_disruption |
| 3267 | ··-·medium_severity | 3271 | ··-·medium_severity |
| 3268 | ··-·no_reboot_needed | 3272 | ··-·no_reboot_needed |
| 3269 | ··-·service_rsyslog_enabled | 3273 | ··-·service_rsyslog_enabled |
| 3270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3271 | [customizations.services] | ||
| 3272 | enabled·=·["rsyslog"] | ||
| 3273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3274 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3275 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3276 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3277 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3278 | #·Remediation·is·applicable·only·in·certain·platforms | 3279 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3279 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3280 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 3410, 14 lines modified | Offset 3410, 19 lines modified | ||
| 3410 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 3410 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 3411 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 3411 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 3412 | References:··········SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 3412 | References:··········SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 3413 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010220 | 3413 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010220 |
| 3414 | ·············_\x8c_\x8i_\x8s·····3.5.1.1 | 3414 | ·············_\x8c_\x8i_\x8s·····3.5.1.1 |
| 3415 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 3415 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 3416 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234821r854186_rule | 3416 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234821r854186_rule |
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3418 | [[packages]] | ||
| 3419 | name·=·"firewalld" | ||
| 3420 | version·=·"*" | ||
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3422 | -·name:·Ensure·firewalld·is·installed | 3426 | -·name:·Ensure·firewalld·is·installed |
| 3423 | ··package: | 3427 | ··package: |
| Offset 3434, 19 lines modified | Offset 3439, 14 lines modified | ||
| 3434 | ··-·PCI-DSSv4-1.2.1 | 3439 | ··-·PCI-DSSv4-1.2.1 |
| 3435 | ··-·enable_strategy | 3440 | ··-·enable_strategy |
| 3436 | ··-·low_complexity | 3441 | ··-·low_complexity |
| 3437 | ··-·low_disruption | 3442 | ··-·low_disruption |
| 3438 | ··-·medium_severity | 3443 | ··-·medium_severity |
| 3439 | ··-·no_reboot_needed | 3444 | ··-·no_reboot_needed |
| 3440 | ··-·package_firewalld_installed | 3445 | ··-·package_firewalld_installed |
| 3441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3442 | [[packages]] | ||
| 3443 | name·=·"firewalld" | ||
| 3444 | version·=·"*" | ||
| 3445 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 15451/21387 bytes (72.24%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 83 lines modified | Offset 15107, 83 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20·4 | 0003b090:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b0b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0e0:·6d36·3333·3222·3e3c·7461·626c·6520·636c··m6332"><table·cl | |||
| 0003b0f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b100:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b110:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b120:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b130:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b150:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b160:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b170:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b180:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b190:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b0a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b0b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0e0:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b100:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b110:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b120:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b130:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b140:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b150:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b160:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b170:·7461·7267·6574·3d22·2369·646d·3633·3333··target="#idm6333 | |||
| 0003b180:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b190:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b1d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b1f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b200:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b210:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b220:·7365·2220·6964·3d22·6964·6d36·3333·3322··se"·id="idm6333" | |||
| 0003b230:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b240:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b250:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b260:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b270:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b280:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b290:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b2e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b2f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b300:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b310:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b320:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b330:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b340:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b350:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b360:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b370:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b380:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b390:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b3a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b3b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b3c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b3d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b3e0:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b3f0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b400:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b410:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b420:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b430:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b440:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b450:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b460:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b470:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b480:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b490:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b4a0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b4b0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b4c0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b4d0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b1d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b1f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b200:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b210:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b220:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b230:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b240:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b250:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b260:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b270:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b280:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b290:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b2a0:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b2c0:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b2d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b2e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| Max diff block lines reached; 188564/199794 bytes (94.38%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 106, 14 lines modified | Offset 106, 19 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 109 | ·············_\x8c_\x8i_\x8s············1.4.1 | 109 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Ensure·aide·is·installed | 122 | -·name:·Ensure·aide·is·installed |
| 119 | ··package: | 123 | ··package: |
| Offset 129, 19 lines modified | Offset 134, 14 lines modified | ||
| 129 | ··-·PCI-DSSv4-11.5.2 | 134 | ··-·PCI-DSSv4-11.5.2 |
| 130 | ··-·enable_strategy | 135 | ··-·enable_strategy |
| 131 | ··-·low_complexity | 136 | ··-·low_complexity |
| 132 | ··-·low_disruption | 137 | ··-·low_disruption |
| 133 | ··-·medium_severity | 138 | ··-·medium_severity |
| 134 | ··-·no_reboot_needed | 139 | ··-·no_reboot_needed |
| 135 | ··-·package_aide_installed | 140 | ··-·package_aide_installed |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"aide" | ||
| 139 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 10007, 14 lines modified | Offset 10007, 19 lines modified | ||
| 10007 | Severity: ···medium | 10007 | Severity: ···medium |
| 10008 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed | 10008 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed |
| 10009 | Identifiers:·CCE-83268-3 | 10009 | Identifiers:·CCE-83268-3 |
| 10010 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 10010 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 10011 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 10011 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 10012 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010110 | 10012 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010110 |
| 10013 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234811r622137_rule | 10013 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234811r622137_rule |
| 10014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10015 | [[packages]] | ||
| 10016 | name·=·"kbd" | ||
| 10017 | version·=·"*" | ||
| 10014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10015 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10019 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10016 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10020 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10017 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10021 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10018 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 10022 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 10019 | -·name:·Ensure·kbd·is·installed | 10023 | -·name:·Ensure·kbd·is·installed |
| 10020 | ··package: | 10024 | ··package: |
| Offset 10026, 19 lines modified | Offset 10031, 14 lines modified | ||
| 10026 | ··-·DISA-STIG-SLES-15-010110 | 10031 | ··-·DISA-STIG-SLES-15-010110 |
| 10027 | ··-·enable_strategy | 10032 | ··-·enable_strategy |
| 10028 | ··-·low_complexity | 10033 | ··-·low_complexity |
| 10029 | ··-·low_disruption | 10034 | ··-·low_disruption |
| 10030 | ··-·medium_severity | 10035 | ··-·medium_severity |
| 10031 | ··-·no_reboot_needed | 10036 | ··-·no_reboot_needed |
| 10032 | ··-·vlock_installed | 10037 | ··-·vlock_installed |
| 10033 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10034 | [[packages]] | ||
| 10035 | name·=·"kbd" | ||
| 10036 | version·=·"*" | ||
| 10037 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 10038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 10038 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10039 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10040 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10041 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 10042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 10042 | #·Remediation·is·applicable·only·in·certain·platforms | 10043 | #·Remediation·is·applicable·only·in·certain·platforms |
| 10043 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 10044 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 12820, 14 lines modified | Offset 12820, 19 lines modified | ||
| 12820 | ·············_\x8n_\x8i_\x8s_\x8t····AC-3(4),·AC-6(8),·AC-6(10),·CM-7(5)(b),·CM-7(2),·SC-7(21),·CM-6(a) | 12820 | ·············_\x8n_\x8i_\x8s_\x8t····AC-3(4),·AC-6(8),·AC-6(10),·CM-7(5)(b),·CM-7(2),·SC-7(21),·CM-6(a) |
| 12821 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000312-GPOS-00122,·SRG-OS-000312-GPOS-00123,·SRG-OS-000312-GPOS-00124,·SRG-OS-000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370- | 12821 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000312-GPOS-00122,·SRG-OS-000312-GPOS-00123,·SRG-OS-000312-GPOS-00124,·SRG-OS-000324-GPOS-00125,·SRG-OS-000326-GPOS-00126,·SRG-OS-000370- |
| 12822 | References:··········GPOS-00155,·SRG-OS-000480-GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 12822 | References:··········GPOS-00155,·SRG-OS-000480-GPOS-00230,·SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 12823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 | 12823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010390 |
| 12824 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 | 12824 | ·············_\x8c_\x8i_\x8s·····1.7.1.1 |
| 12825 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 | 12825 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R45 |
| 12826 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule | 12826 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234848r854194_rule |
| 12827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12828 | [[packages]] | ||
| 12829 | name·=·"pam_apparmor" | ||
| 12830 | version·=·"*" | ||
| 12827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 12831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 12828 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 12832 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 12829 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 12833 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 12830 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 12834 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 12831 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 12835 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 12832 | -·name:·Ensure·pam_apparmor·is·installed | 12836 | -·name:·Ensure·pam_apparmor·is·installed |
| 12833 | ··package: | 12837 | ··package: |
| Offset 12846, 19 lines modified | Offset 12851, 14 lines modified | ||
| 12846 | ··-·NIST-800-53-SC-7(21) | 12851 | ··-·NIST-800-53-SC-7(21) |
| 12847 | ··-·enable_strategy | 12852 | ··-·enable_strategy |
| 12848 | ··-·low_complexity | 12853 | ··-·low_complexity |
| 12849 | ··-·low_disruption | 12854 | ··-·low_disruption |
| 12850 | ··-·medium_severity | 12855 | ··-·medium_severity |
| 12851 | ··-·no_reboot_needed | 12856 | ··-·no_reboot_needed |
| 12852 | ··-·package_pam_apparmor_installed | 12857 | ··-·package_pam_apparmor_installed |
| 12853 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 12854 | [[packages]] | ||
| 12855 | name·=·"pam_apparmor" | ||
| Max diff block lines reached; 17495/23164 bytes (75.53%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f50:·7320·6f66·2032·3032·3 | 00037f50:·7320·6f66·2032·3032·342d·3131·2d30·3929··s·of·2024-11-09) | ||
| 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 17757, 84 lines modified | Offset 17757, 84 lines modified | ||
| 000455c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000455c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000455d0:·6d36·3836·2220·7461·6269·6e64·6578·3d22··m686"·tabindex=" | 000455d0:·6d36·3836·2220·7461·6269·6e64·6578·3d22··m686"·tabindex=" | ||
| 000455e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000455e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000455f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000455f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00045600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00045600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00045610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00045610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00045620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00045620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00045630:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 00045640:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00045650:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00045660:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00045670:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00045680:·2220·6964·3d22·6964·6d36·3836·223e·3c70··"·id="idm686"><p | |||
| 00045690:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 000456a0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2270··ages]].name·=·"p | |||
| 000456b0:·6f6c·6963·7963·6f72·6575·7469·6c73·2d70··olicycoreutils-p | |||
| 000456c0:·7974·686f·6e2d·7574·696c·7322·0a76·6572··ython-utils".ver | |||
| 000456d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 000456e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 000456f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00045700:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00045710:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00045720:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00045730:·6d36·3837·2220·7461·6269·6e64·6578·3d22··m687"·tabindex=" | |||
| 00045740:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00045750:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00045760:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00045770:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00045780:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00045 | 00045790:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00045 | 000457a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 00045 | 000457b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 00045 | 000457c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 00045 | 000457d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | ||
| 00045 | 000457e0:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | ||
| 00045 | 000457f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 00045 | 00045800:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 00045 | 00045810:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 00045 | 00045820:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 00045 | 00045830:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 00045 | 00045840:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00045 | 00045850:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00045 | 00045860:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 00045 | 00045870:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00045 | 00045880:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00045 | 00045890:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 00045 | 000458a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 00045 | 000458b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 00045 | 000458c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 00045 | 000458d0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 00045 | 000458e0:·6d65·3a20·456e·7375·7265·2070·6f6c·6963··me:·Ensure·polic | ||
| 00045 | 000458f0:·7963·6f72·6575·7469·6c73·2d70·7974·686f··ycoreutils-pytho | ||
| 00045 | 00045900:·6e2d·7574·696c·7320·6973·2069·6e73·7461··n-utils·is·insta | ||
| 00045 | 00045910:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | ||
| 00045 | 00045920:·2020·2020·6e61·6d65·3a20·706f·6c69·6379······name:·policy | ||
| 00045 | 00045930:·636f·7265·7574·696c·732d·7079·7468·6f6e··coreutils-python | ||
| 00045 | 00045940:·2d75·7469·6c73·0a20·2020·2073·7461·7465··-utils.····state | ||
| 00045 | 00045950:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 00045 | 00045960:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | ||
| 00045 | 00045970:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 00045 | 00045980:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 00045 | 00045990:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 00045 | 000459a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 00045 | 000459b0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 00045 | 000459c0:·2020·2d20·4343·452d·3934·3039·312d·360a····-·CCE-94091-6. | ||
| 00045 | 000459d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | ||
| 00045 | 000459e0:·454d·2d30·352d·3635·3432·3230·0a20·202d··EM-05-654220.··- | ||
| 00045 | 000459f0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | ||
| 00045 | 00045a00:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | ||
| 00045 | 00045a10:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | ||
| 00045 | 00045a20:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 00045 | 00045a30:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 00045 | 00045a40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 00045 | 00045a50:·2020·2d20·7061·636b·6167·655f·706f·6c69····-·package_poli | ||
| 00045 | 00045a60:·6379·636f·7265·7574·696c·732d·7079·7468··cycoreutils-pyth | ||
| 00045 | 00045a70:·6f6e·2d75·7469·6c73·5f69·6e73·7461·6c6c··on-utils_install | ||
| 00045 | 00045a80:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | ||
| 00045930:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00045940:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00045950:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00045960:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00045970:·6765·743d·2223·6964·6d36·3837·2220·7461··get="#idm687"·ta | |||
| 00045980:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00045990:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000459a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000459b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000459c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000459d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 000459e0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000459f0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 00045a00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00045a10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00045a20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00045a30:·6d36·3837·223e·3c70·7265·3e3c·636f·6465··m687"><pre><code | |||
| 00045a40:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 00045a50:·616d·6520·3d20·2270·6f6c·6963·7963·6f72··ame·=·"policycor | |||
| 00045a60:·6575·7469·6c73·2d70·7974·686f·6e2d·7574··eutils-python-ut | |||
| 00045a70:·696c·7322·0a76·6572·7369·6f6e·203d·2022··ils".version·=·" | |||
| 00045a80:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 00045a90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | 00045a90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 00045aa0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | 00045aa0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 00045ab0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | 00045ab0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 00045ac0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | 00045ac0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 00045ad0:·6765·743d·2223·6964·6d36·3838·2220·7461··get="#idm688"·ta | 00045ad0:·6765·743d·2223·6964·6d36·3838·2220·7461··get="#idm688"·ta | ||
| 00045ae0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00045ae0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00045af0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00045af0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| Offset 18106, 80 lines modified | Offset 18106, 80 lines modified | ||
| 00046b90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 00046b90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 00046ba0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | 00046ba0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | ||
| 00046bb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00046bb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00046bc0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00046bc0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| Max diff block lines reached; 20381/32534 bytes (62.65%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:sle-microos:5.2 | 41 | ····*·cpe:/o:suse:sle-microos:5.2 |
| 42 | ····*·cpe:/o:suse:sle-micro:5.3 | 42 | ····*·cpe:/o:suse:sle-micro:5.3 |
| 43 | ····*·cpe:/o:suse:sle-micro:5.4 | 43 | ····*·cpe:/o:suse:sle-micro:5.4 |
| 44 | ····*·cpe:/o:suse:sle-micro:5.5 | 44 | ····*·cpe:/o:suse:sle-micro:5.5 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 749, 14 lines modified | Offset 749, 19 lines modified | ||
| 749 | ·············sandbox. | 749 | ·············sandbox. |
| 750 | Severity: ···medium | 750 | Severity: ···medium |
| 751 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils-python-utils_installed | 751 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils-python-utils_installed |
| 752 | Identifiers:·CCE-94091-6 | 752 | Identifiers:·CCE-94091-6 |
| 753 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 753 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 754 | References:··_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-654220 | 754 | References:··_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-654220 |
| 755 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261467r996808_rule | 755 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261467r996808_rule |
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 757 | [[packages]] | ||
| 758 | name·=·"policycoreutils-python-utils" | ||
| 759 | version·=·"*" | ||
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 757 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 758 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 759 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 760 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 761 | -·name:·Ensure·policycoreutils-python-utils·is·installed | 765 | -·name:·Ensure·policycoreutils-python-utils·is·installed |
| 762 | ··package: | 766 | ··package: |
| Offset 768, 19 lines modified | Offset 773, 14 lines modified | ||
| 768 | ··-·DISA-STIG-SLEM-05-654220 | 773 | ··-·DISA-STIG-SLEM-05-654220 |
| 769 | ··-·enable_strategy | 774 | ··-·enable_strategy |
| 770 | ··-·low_complexity | 775 | ··-·low_complexity |
| 771 | ··-·low_disruption | 776 | ··-·low_disruption |
| 772 | ··-·medium_severity | 777 | ··-·medium_severity |
| 773 | ··-·no_reboot_needed | 778 | ··-·no_reboot_needed |
| 774 | ··-·package_policycoreutils-python-utils_installed | 779 | ··-·package_policycoreutils-python-utils_installed |
| 775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 776 | [[packages]] | ||
| 777 | name·=·"policycoreutils-python-utils" | ||
| 778 | version·=·"*" | ||
| 779 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 780 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 780 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 781 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 781 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 782 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 782 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 783 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 783 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 784 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 784 | include·install_policycoreutils-python-utils | 785 | include·install_policycoreutils-python-utils |
| Offset 805, 14 lines modified | Offset 805, 19 lines modified | ||
| 805 | Severity: ···low | 805 | Severity: ···low |
| 806 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils_installed | 806 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils_installed |
| 807 | Identifiers:·CCE-94097-3 | 807 | Identifiers:·CCE-94097-3 |
| 808 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001084 | 808 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001084 |
| 809 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227,·SRG-OS-000134-GPOS-00068 | 809 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227,·SRG-OS-000134-GPOS-00068 |
| 810 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-431010 | 810 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-431010 |
| 811 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261368r996548_rule | 811 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261368r996548_rule |
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 813 | [[packages]] | ||
| 814 | name·=·"policycoreutils" | ||
| 815 | version·=·"*" | ||
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 816 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 813 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 817 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 814 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 818 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 815 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 819 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 816 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 820 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 817 | -·name:·Ensure·policycoreutils·is·installed | 821 | -·name:·Ensure·policycoreutils·is·installed |
| 818 | ··package: | 822 | ··package: |
| Offset 824, 19 lines modified | Offset 829, 14 lines modified | ||
| 824 | ··-·DISA-STIG-SLEM-05-431010 | 829 | ··-·DISA-STIG-SLEM-05-431010 |
| 825 | ··-·enable_strategy | 830 | ··-·enable_strategy |
| 826 | ··-·low_complexity | 831 | ··-·low_complexity |
| 827 | ··-·low_disruption | 832 | ··-·low_disruption |
| 828 | ··-·low_severity | 833 | ··-·low_severity |
| 829 | ··-·no_reboot_needed | 834 | ··-·no_reboot_needed |
| 830 | ··-·package_policycoreutils_installed | 835 | ··-·package_policycoreutils_installed |
| 831 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 832 | [[packages]] | ||
| 833 | name·=·"policycoreutils" | ||
| 834 | version·=·"*" | ||
| 835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 836 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 837 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 838 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 839 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 840 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 840 | include·install_policycoreutils | 841 | include·install_policycoreutils |
| Offset 16523, 14 lines modified | Offset 16523, 19 lines modified | ||
| 16523 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(D),·164.308(a)(5)(ii)(C),·164.310(a)(2)(iv),·164.310(d)(2) | 16523 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(D),·164.308(a)(5)(ii)(C),·164.310(a)(2)(iv),·164.310(d)(2) |
| 16524 | ·····················(iii),·164.312(b) | 16524 | ·····················(iii),·164.312(b) |
| 16525 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.5.3 | 16525 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.5.3 |
| 16526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000342-GPOS-00133 | 16526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000342-GPOS-00133 |
| 16527 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·10.3.3 | 16527 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·10.3.3 |
| 16528 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-653025 | 16528 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-653025 |
| 16529 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261413r996652_rule | 16529 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261413r996652_rule |
| 16530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 16531 | [[packages]] | ||
| 16532 | name·=·"audit-audispd-plugins" | ||
| 16533 | version·=·"*" | ||
| 16530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 16534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 16531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 16535 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 16532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 16536 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 16533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 16537 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 16534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 16538 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 16535 | -·name:·Ensure·audit-audispd-plugins·is·installed | 16539 | -·name:·Ensure·audit-audispd-plugins·is·installed |
| 16536 | ··package: | 16540 | ··package: |
| Offset 16544, 19 lines modified | Offset 16549, 14 lines modified | ||
| 16544 | ··-·PCI-DSSv4-10.3.3 | 16549 | ··-·PCI-DSSv4-10.3.3 |
| 16545 | ··-·enable_strategy | 16550 | ··-·enable_strategy |
| 16546 | ··-·low_complexity | 16551 | ··-·low_complexity |
| 16547 | ··-·low_disruption | 16552 | ··-·low_disruption |
| 16548 | ··-·medium_severity | 16553 | ··-·medium_severity |
| 16549 | ··-·no_reboot_needed | 16554 | ··-·no_reboot_needed |
| 16550 | ··-·package_audit-audispd-plugins_installed | 16555 | ··-·package_audit-audispd-plugins_installed |
| 16551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 16552 | [[packages]] | ||
| 16553 | name·=·"audit-audispd-plugins" | ||
| Max diff block lines reached; 190/5457 bytes (3.48%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d80:·6173·206f·6620·3230·323 | 00037d80:·6173·206f·6620·3230·3234·2d31·312d·3039··as·of·2024-11-09 | ||
| 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 19857, 237 lines modified | Offset 19857, 237 lines modified | ||
| 0004d900:·6574·3d22·2369·646d·3837·3135·2220·7461··et="#idm8715"·ta | 0004d900:·6574·3d22·2369·646d·3837·3135·2220·7461··et="#idm8715"·ta | ||
| 0004d910:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0004d910:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004d920:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0004d920:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004d930:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0004d930:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004d940:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0004d940:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004d950:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0004d950:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004d960:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0004d960:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004d970:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0004d980:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004d990:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004d9a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004d9b0:·6964·3d22·6964·6d38·3731·3522·3e3c·7461··id="idm8715"><ta | |||
| 0004d9c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0004d9d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0004d9e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0004d9f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0004da00:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0004da10:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0004da20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004da30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0004da40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004da50:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004da60:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0004da70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004da80:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0004da90:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 0004daa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0004dab0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0004dac0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0004dad0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0004dae0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0004daf0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0004db00:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d31··:.··-·NIST-800-1 | |||
| 0004db10:·3731·2d33·2e34·2e36·0a20·202d·204e·4953··71-3.4.6.··-·NIS | |||
| 0004d | 0004d970:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0004d980:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0004d990:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004d9a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004d9b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004d9c0:·6d38·3731·3522·3e3c·7072·653e·3c63·6f64··m8715"><pre><cod | |||
| 0004d9d0:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 0004d9e0:·6e73·2e73·6572·7669·6365·735d·0a6d·6173··ns.services].mas | |||
| 0004d9f0:·6b65·6420·3d20·5b22·6175·746f·6673·225d··ked·=·["autofs"] | |||
| 0004da00:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0004da10:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0004da20:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0004da30:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0004da40:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0004da50:·743d·2223·6964·6d38·3731·3622·2074·6162··t="#idm8716"·tab | |||
| 0004da60:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0004da70:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0004da80:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0004da90:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0004daa0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0004dab0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0004dac0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0004dad0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004dae0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004daf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004db00:·643d·2269·646d·3837·3136·223e·3c74·6162··d="idm8716"><tab | |||
| 0004db10:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004db20:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004db30:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004db40:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004db50:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004db60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004db70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004db80:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004db90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004dba0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004dbb0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004dbc0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004dbd0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004dbe0:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 0004dbf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0004dc00:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0004dc10:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0004dc20:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0004dc30:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0004dc40:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0004d | 0004dc50:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0004db40:·2d43·4d2d·3728·6129·0a20·202d·204e·4953··-CM-7(a).··-·NIS | |||
| 0004db50:·542d·3830·302d·3533·2d43·4d2d·3728·6229··T-800-53-CM-7(b) | |||
| 0004db60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004db70:·2d4d·502d·370a·2020·2d20·6469·7361·626c··-MP-7.··-·disabl | |||
| 0004db80:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0004db90:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0004dba0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0004dbb0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0004dbc0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0004dbd0:·6f74·5f6e·6565·6465·640a·2020·2d20·7365··ot_needed.··-·se | |||
| 0004dbe0:·7276·6963·655f·6175·746f·6673·5f64·6973··rvice_autofs_dis | |||
| 0004dbf0:·6162·6c65·640a·0a2d·206e·616d·653a·2044··abled..-·name:·D | |||
| 0004dc00:·6973·6162·6c65·2074·6865·2041·7574·6f6d··isable·the·Autom | |||
| 0004dc10:·6f75·6e74·6572·202d·2043·6f6c·6c65·6374··ounter·-·Collect | |||
| 0004dc20:·2073·7973·7465·6d64·2053·6572·7669·6365···systemd·Service | |||
| 0004dc30:·7320·5072·6573·656e·7420·696e·2074·6865··s·Present·in·the | |||
| 0004dc40:·2053·7973·7465·6d0a·2020·616e·7369·626c···System.··ansibl | |||
| 0004dc50:·652e·6275·696c·7469·6e2e·636f·6d6d·616e··e.builtin.comman | |||
| 0004dc60:·643a·2073·7973·7465·6d63·746c·202d·7120··d:·systemctl·-q· | |||
| 0004dc70:·6c69·7374·2d75·6e69·742d·6669·6c65·7320··list-unit-files· | |||
| 0004dc80:·2d2d·7479·7065·2073·6572·7669·6365·0a20··--type·service.· | |||
| 0004dc90:·2072·6567·6973·7465·723a·2073·6572·7669···register:·servi | |||
| 0004dca0:·6365·5f65·7869·7374·730a·2020·6368·616e··ce_exists.··chan | |||
| 0004dcb0:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0004dcc0:·2020·6661·696c·6564·5f77·6865·6e3a·2073····failed_when:·s | |||
| 0004dcd0:·6572·7669·6365·5f65·7869·7374·732e·7263··ervice_exists.rc | |||
| 0004dce0:·206e·6f74·2069·6e20·5b30·2c20·315d·0a20···not·in·[0,·1].· | |||
| 0004dcf0:·2063·6865·636b·5f6d·6f64·653a·2066·616c···check_mode:·fal | |||
| 0004dd00:·7365·0a20·2077·6865·6e3a·2028·2061·6e73··se.··when:·(·ans | |||
| 0004dd10:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| Max diff block lines reached; 157212/189696 bytes (82.88%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:uos:uniontech_os_server:20 | 43 | ····*·cpe:/o:uos:uniontech_os_server:20 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-09) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 991, 14 lines modified | Offset 991, 18 lines modified | ||
| 991 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 991 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 992 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 992 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 993 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 993 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 994 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 994 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 995 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 995 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 996 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG- | 996 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG- |
| 997 | ···························OS-000480-GPOS-00227 | 997 | ···························OS-000480-GPOS-00227 |
| 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 999 | [customizations.services] | ||
| 1000 | masked·=·["autofs"] | ||
| 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 999 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1002 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1000 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1003 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1001 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1004 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1002 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1005 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1003 | -·name:·Gather·the·package·facts | 1006 | -·name:·Gather·the·package·facts |
| 1004 | ··package_facts: | 1007 | ··package_facts: |
| Offset 1101, 18 lines modified | Offset 1105, 14 lines modified | ||
| 1101 | ··-·NIST-800-53-MP-7 | 1105 | ··-·NIST-800-53-MP-7 |
| 1102 | ··-·disable_strategy | 1106 | ··-·disable_strategy |
| 1103 | ··-·low_complexity | 1107 | ··-·low_complexity |
| 1104 | ··-·low_disruption | 1108 | ··-·low_disruption |
| 1105 | ··-·medium_severity | 1109 | ··-·medium_severity |
| 1106 | ··-·no_reboot_needed | 1110 | ··-·no_reboot_needed |
| 1107 | ··-·service_autofs_disabled | 1111 | ··-·service_autofs_disabled |
| 1108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1109 | [customizations.services] | ||
| 1110 | masked·=·["autofs"] | ||
| 1111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1116 | include·disable_autofs | 1117 | include·disable_autofs |
| Offset 1166, 14 lines modified | Offset 1166, 18 lines modified | ||
| 1166 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR | 1166 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR |
| 1167 | ···························5.3,·SR·7.1,·SR·7.6 | 1167 | ···························5.3,·SR·7.1,·SR·7.6 |
| 1168 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, | 1168 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, |
| 1169 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 1169 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 1170 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 | 1170 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1171 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1171 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1172 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1172 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1174 | [customizations.services] | ||
| 1175 | masked·=·["abrtd"] | ||
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1178 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services | 1181 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services |
| 1179 | Present | 1182 | Present |
| Offset 1249, 18 lines modified | Offset 1253, 14 lines modified | ||
| 1249 | ··-·NIST-800-53-CM-7(a) | 1253 | ··-·NIST-800-53-CM-7(a) |
| 1250 | ··-·disable_strategy | 1254 | ··-·disable_strategy |
| 1251 | ··-·low_complexity | 1255 | ··-·low_complexity |
| 1252 | ··-·low_disruption | 1256 | ··-·low_disruption |
| 1253 | ··-·medium_severity | 1257 | ··-·medium_severity |
| 1254 | ··-·no_reboot_needed | 1258 | ··-·no_reboot_needed |
| 1255 | ··-·service_abrtd_disabled | 1259 | ··-·service_abrtd_disabled |
| 1256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1257 | [customizations.services] | ||
| 1258 | masked·=·["abrtd"] | ||
| 1259 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1260 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1261 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1262 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1263 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1264 | include·disable_abrtd | 1265 | include·disable_abrtd |
| Offset 1297, 14 lines modified | Offset 1297, 18 lines modified | ||
| 1297 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR | 1297 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR |
| 1298 | ···························5.3,·SR·7.1,·SR·7.6 | 1298 | ···························5.3,·SR·7.1,·SR·7.6 |
| 1299 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, | 1299 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, |
| 1300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 1300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 1301 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 | 1301 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 1302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 1303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1305 | [customizations.services] | ||
| 1306 | masked·=·["ntpdate"] | ||
| 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1309 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the | 1312 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the |
| 1310 | ····System | 1313 | ····System |
| Offset 1382, 18 lines modified | Offset 1386, 14 lines modified | ||
| 1382 | ··-·NIST-800-53-CM-7(b) | 1386 | ··-·NIST-800-53-CM-7(b) |
| 1383 | ··-·disable_strategy | 1387 | ··-·disable_strategy |
| 1384 | ··-·low_complexity | 1388 | ··-·low_complexity |
| 1385 | ··-·low_disruption | 1389 | ··-·low_disruption |
| 1386 | ··-·low_severity | 1390 | ··-·low_severity |
| 1387 | ··-·no_reboot_needed | 1391 | ··-·no_reboot_needed |
| 1388 | ··-·service_ntpdate_disabled | 1392 | ··-·service_ntpdate_disabled |
| 1389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1390 | [customizations.services] | ||
| 1391 | masked·=·["ntpdate"] | ||
| 1392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 6728/12731 bytes (52.85%) of diff not shown. | |||
| Offset 184, 159 lines modified | Offset 184, 159 lines modified | ||
| 00000b70:·6162·6c65·2065·6974·6865·7220·4578·6563··able·either·Exec | 00000b70:·6162·6c65·2065·6974·6865·7220·4578·6563··able·either·Exec | ||
| 00000b80:·7574·6520·4469·7361·626c·6520·2858·4429··ute·Disable·(XD) | 00000b80:·7574·6520·4469·7361·626c·6520·2858·4429··ute·Disable·(XD) | ||
| 00000b90:·206f·7220·4e6f·2045·7865·6375·7465·2028···or·No·Execute·( | 00000b90:·206f·7220·4e6f·2045·7865·6375·7465·2028···or·No·Execute·( | ||
| 00000ba0:·4e58·2920·7375·7070·6f72·742e·0a20·2020··NX)·support..··· | 00000ba0:·4e58·2920·7375·7070·6f72·742e·0a20·2020··NX)·support..··· | ||
| 00000bb0:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00000bb0:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00000bc0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00000bc0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00000bd0:·2020·3c74·643e·5231·3c2f·7464·3e0a·2020····<td>R1</td>.·· | 00000bd0:·2020·3c74·643e·5231·3c2f·7464·3e0a·2020····<td>R1</td>.·· | ||
| 00000be0:·2020·2020·3c74·643e·496e·7374·616c·6c20······<td>Install· | |||
| 00000bf0:·7468·6520·6472·6163·7574·2d66·6970·732d··the·dracut-fips- | |||
| 00000 | 00000be0:·2020·2020·3c74·643e·5072·6566·6572·2074······<td>Prefer·t | ||
| 00000bf0:·6f20·7573·6520·6120·3634·2d62·6974·204f··o·use·a·64-bit·O | |||
| 00000c00:·7065·7261·7469·6e67·2053·7973·7465·6d20··perating·System· | |||
| 00000c10:·7768·656e·2073·7570·706f·7274·6564·3c2f··when·supported</ | |||
| 00000c | 00000c20:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | ||
| 00000c30:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00000c40:·2020·2020·2020·2020·5072·6566·6572·2069··········Prefer·i | |||
| 00000c50:·6e73·7461·6c6c·6174·696f·6e20·6f66·2036··nstallation·of·6 | |||
| 00000c60:·342d·6269·7420·6f70·6572·6174·696e·6720··4-bit·operating· | |||
| 00000c70:·7379·7374·656d·7320·7768·656e·2074·6865··systems·when·the | |||
| 00000c80:·2043·5055·2073·7570·706f·7274·7320·6974···CPU·supports·it | |||
| 00000c20:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00000c30:·2020·2020·2020·2054·6f20·656e·6162·6c65·········To·enable | |||
| 00000c40:·2046·4950·5320·6f6e·2073·7973·7465·6d20···FIPS·on·system· | |||
| 00000c50:·7468·6174·2073·7570·706f·7274·2074·6865··that·support·the | |||
| 00000c60:·2041·6476·616e·6365·6420·456e·6372·7970···Advanced·Encryp | |||
| 00000c70:·7469·6f6e·2053·7461·6e64·6172·6420·2841··tion·Standard·(A | |||
| 00000c80:·4553·2920·6f72·204e·6577·0a49·6e73·7472··ES)·or·New.Instr | |||
| 00000c90:·7563·7469·6f6e·7320·2841·4553·2d4e·4929··uctions·(AES-NI) | |||
| 00000ca0:·2065·6e67·696e·652c·2074·6865·2073·7973···engine,·the·sys | |||
| 00000cb0:·7465·6d20·7265·7175·6972·6573·2074·6861··tem·requires·tha | |||
| 00000cc0:·7420·7468·6520·3c74·743e·6472·6163·7574··t·the·<tt>dracut | |||
| 00000cd0:·2d66·6970·732d·6165·736e·693c·2f74·743e··-fips-aesni</tt> | |||
| 00000ce0:·0a70·6163·6b61·6765·2062·6520·696e·7374··.package·be·inst | |||
| 00000cf0:·616c·6c65·642e·0a54·6865·203c·636f·6465··alled..The·<code | |||
| 00000d00:·3e64·7261·6375·742d·6669·7073·2d61·6573··>dracut-fips-aes | |||
| 00000d10:·6e69·3c2f·636f·6465·3e20·7061·636b·6167··ni</code>·packag | |||
| 00000d20:·6520·6361·6e20·6265·2069·6e73·7461·6c6c··e·can·be·install | |||
| 00000d30:·6564·2077·6974·6820·7468·6520·666f·6c6c··ed·with·the·foll | |||
| 00000d40:·6f77·696e·6720·636f·6d6d·616e·643a·0a3c··owing·command:.< | |||
| 00000d50:·7072·653e·0a24·2073·7564·6f20·7975·6d20··pre>.$·sudo·yum· | |||
| 00000d60:·696e·7374·616c·6c20·6472·6163·7574·2d66··install·dracut-f | |||
| 00000d70:·6970·732d·6165·736e·693c·2f70·7265·3e0a··ips-aesni</pre>. | |||
| 00000 | 00000c90:·2e0a·2020·2020·2020·3c2f·7464·3e0a·2020··..······</td>.·· | ||
| 00000 | 00000ca0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 00000 | 00000cb0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| 00000cc0:·2020·5573·6520·6f66·2061·2036·342d·6269····Use·of·a·64-bi | |||
| 00000cd0:·7420·6f70·6572·6174·696e·6720·7379·7374··t·operating·syst | |||
| 00000ce0:·656d·206f·6666·6572·7320·6120·6665·7720··em·offers·a·few· | |||
| 00000cf0:·6164·7661·6e74·6167·6573·2c20·6c69·6b65··advantages,·like | |||
| 00000d00:·2061·206c·6172·6765·7220·6164·6472·6573···a·larger·addres | |||
| 00000d10:·7320·7370·6163·6520·7261·6e67·6520·666f··s·space·range·fo | |||
| 00000d20:·720a·4164·6472·6573·7320·5370·6163·6520··r.Address·Space· | |||
| 00000d30:·4c61·796f·7574·2052·616e·646f·6d69·7a61··Layout·Randomiza | |||
| 00000d40:·7469·6f6e·2028·4153·4c52·2920·616e·6420··tion·(ASLR)·and· | |||
| 00000d50:·7379·7374·656d·6174·6963·2070·7265·7365··systematic·prese | |||
| 00000d60:·6e63·6520·6f66·204e·6f20·6558·6563·7574··nce·of·No·eXecut | |||
| 00000d70:·6520·616e·6420·4578·6563·7574·6520·4469··e·and·Execute·Di | |||
| 00000d80:·7361·626c·6520·284e·582f·5844·2920·7072··sable·(NX/XD)·pr | |||
| 00000d90:·6f74·6563·7469·6f6e·2062·6974·732e·0a20··otection·bits..· | |||
| 00000da0:·2020·2020·203c·2f74·643e·0a20·2020·203c·······</td>.····< | |||
| 00000db0:·2f74·723e·0a20·2020·203c·7472·3e0a·2020··/tr>.····<tr>.·· | |||
| 00000dc0:·2020·2020·3c74·643e·5231·3c2f·7464·3e0a······<td>R1</td>. | |||
| 00000dd0:·2020·2020·2020·3c74·643e·496e·7374·616c········<td>Instal | |||
| 00000de0:·6c20·7468·6520·6472·6163·7574·2d66·6970··l·the·dracut-fip | |||
| 00000df0:·732d·6165·736e·6920·5061·636b·6167·653c··s-aesni·Package< | |||
| 00000e00:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | |||
| 00000e10:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | |||
| 00000e20:·0a20·2020·2020·2020·2054·6f20·656e·6162··.········To·enab | |||
| 00000e30:·6c65·2046·4950·5320·6f6e·2073·7973·7465··le·FIPS·on·syste | |||
| 00000e40:·6d20·7468·6174·2073·7570·706f·7274·2074··m·that·support·t | |||
| 00000e50:·6865·2041·6476·616e·6365·6420·456e·6372··he·Advanced·Encr | |||
| 00000e60:·7970·7469·6f6e·2053·7461·6e64·6172·6420··yption·Standard· | |||
| 00000e70:·2841·4553·2920·6f72·204e·6577·0a49·6e73··(AES)·or·New.Ins | |||
| 00000e80:·7472·7563·7469·6f6e·7320·2841·4553·2d4e··tructions·(AES-N | |||
| 00000e90:·4929·2065·6e67·696e·652c·2074·6865·2073··I)·engine,·the·s | |||
| 00000ea0:·7973·7465·6d20·7265·7175·6972·6573·2074··ystem·requires·t | |||
| 00000eb0:·6861·7420·7468·6520·3c74·743e·6472·6163··hat·the·<tt>drac | |||
| 00000ec0:·7574·2d66·6970·732d·6165·736e·693c·2f74··ut-fips-aesni</t | |||
| 00000ed0:·743e·0a70·6163·6b61·6765·2062·6520·696e··t>.package·be·in | |||
| 00000ee0:·7374·616c·6c65·642e·0a54·6865·203c·636f··stalled..The·<co | |||
| 00000ef0:·6465·3e64·7261·6375·742d·6669·7073·2d61··de>dracut-fips-a | |||
| 00000f00:·6573·6e69·3c2f·636f·6465·3e20·7061·636b··esni</code>·pack | |||
| 00000f10:·6167·6520·6361·6e20·6265·2069·6e73·7461··age·can·be·insta | |||
| 00000f20:·6c6c·6564·2077·6974·6820·7468·6520·666f··lled·with·the·fo | |||
| 00000f30:·6c6c·6f77·696e·6720·636f·6d6d·616e·643a··llowing·command: | |||
| 00000f40:·0a3c·7072·653e·0a24·2073·7564·6f20·7975··.<pre>.$·sudo·yu | |||
| 00000f50:·6d20·696e·7374·616c·6c20·6472·6163·7574··m·install·dracut | |||
| 00000f60:·2d66·6970·732d·6165·736e·693c·2f70·7265··-fips-aesni</pre | |||
| 00000f70:·3e0a·2020·2020·2020·3c2f·7464·3e0a·2020··>.······</td>.·· | |||
| 00000f80:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00000f90:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 00000 | 00000fa0:·2020·5573·6520·6f66·2077·6561·6b20·6f72····Use·of·weak·or | ||
| 00000 | 00000fb0:·2075·6e74·6573·7465·6420·656e·6372·7970···untested·encryp | ||
| 00000 | 00000fc0:·7469·6f6e·2061·6c67·6f72·6974·686d·7320··tion·algorithms· | ||
| 00000 | 00000fd0:·756e·6465·726d·696e·6573·2074·6865·2070··undermines·the·p | ||
| 00000 | 00000fe0:·7572·706f·7365·7320·6f66·2075·7469·6c69··urposes·of·utili | ||
| 00000 | 00000ff0:·7a69·6e67·2065·6e63·7279·7074·696f·6e20··zing·encryption· | ||
| 0000 | 00001000:·746f·0a70·726f·7465·6374·2064·6174·612e··to.protect·data. | ||
| 00000 | 00001010:·2054·6865·206f·7065·7261·7469·6e67·2073···The·operating·s | ||
| 0000 | 00001020:·7973·7465·6d20·6d75·7374·2069·6d70·6c65··ystem·must·imple | ||
| 0000 | 00001030:·6d65·6e74·2063·7279·7074·6f67·7261·7068··ment·cryptograph | ||
| 0000 | 00001040:·6963·206d·6f64·756c·6573·2061·6468·6572··ic·modules·adher | ||
| 00000 | 00001050:·696e·6720·746f·2074·6865·2068·6967·6865··ing·to·the·highe | ||
| 00000 | 00001060:·720a·7374·616e·6461·7264·7320·6170·7072··r.standards·appr | ||
| 0000 | 00001070:·6f76·6564·2062·7920·7468·6520·6665·6465··oved·by·the·fede | ||
| 0000 | 00001080:·7261·6c20·676f·7665·726e·6d65·6e74·2073··ral·government·s | ||
| 0000 | 00001090:·696e·6365·2074·6869·7320·7072·6f76·6964··ince·this·provid | ||
| 0000 | 000010a0:·6573·2061·7373·7572·616e·6365·2074·6865··es·assurance·the | ||
| 0000 | 000010b0:·7920·6861·7665·2062·6565·6e20·7465·7374··y·have·been·test | ||
| 0000 | 000010c0:·6564·0a61·6e64·2076·616c·6964·6174·6564··ed.and·validated | ||
| 00000 | 000010d0:·2e0a·2020·2020·2020·3c2f·7464·3e0a·2020··..······</td>.·· | ||
| 00000e | 000010e0:·2020·3c2f·7472·3e0a·2020·2020·3c74·723e····</tr>.····<tr> | ||
| 00000f00 | 000010f0:·0a20·2020·2020·203c·7464·3e52·313c·2f74··.······<td>R1</t | ||
| 0000 | 00001100:·643e·0a20·2020·2020·203c·7464·3e45·6e73··d>.······<td>Ens | ||
| 0000 | 00001110:·7572·6520·534d·4150·2069·7320·6e6f·7420··ure·SMAP·is·not· | ||
| 0000 | 00001120:·6469·7361·626c·6564·2064·7572·696e·6720··disabled·during· | ||
| 00000f40:·6f74·3c2f·7464·3e0a·2020·2020·2020·3c74··ot</td>.······<t | |||
| 00000f50:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | |||
| 00000f60:·5322·3e0a·2020·2020·2020·2020·5468·6520··S">.········The· | |||
| 00000f70:·534d·4150·2069·7320·7573·6564·2074·6f20··SMAP·is·used·to· | |||
| 00000f80:·7072·6576·656e·7420·7468·6520·7375·7065··prevent·the·supe | |||
| 00000f90:·7276·6973·6f72·206d·6f64·6520·6672·6f6d··rvisor·mode·from | |||
| 00000fa0:·2075·6e69·6e74·656e·7469·6f6e·616c·6c79···unintentionally | |||
| 00000fb0:·2072·6561·6469·6e67·2f77·7269·7469·6e67···reading/writing | |||
| 00000fc0:·2069·6e74·6f0a·6d65·6d6f·7279·2070·6167···into.memory·pag | |||
| 00000fd0:·6573·2069·6e20·7468·6520·7573·6572·2073··es·in·the·user·s | |||
| 00000fe0:·7061·6365·2c20·6974·2069·7320·656e·6162··pace,·it·is·enab | |||
| Max diff block lines reached; 2940474/2960232 bytes (99.33%) of diff not shown. | |||
| Offset 30, 14 lines modified | Offset 30, 21 lines modified | ||
| 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 31 | ······························installed·with·the·following·command:········(NX)·support. | 31 | ······························installed·with·the·following·command:········(NX)·support. |
| 32 | ······························$·sudo·yum·install·kernel-PAE | 32 | ······························$·sudo·yum·install·kernel-PAE |
| 33 | ······························The·installation·process·should·also·have | 33 | ······························The·installation·process·should·also·have |
| 34 | ······························configured·the·bootloader·to·load·the·new | 34 | ······························configured·the·bootloader·to·load·the·new |
| 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 36 | ······························modify·/etc/default/grub·if·necessary. | 36 | ······························modify·/etc/default/grub·if·necessary. |
| 37 | ···········································································Use·of·a·64-bit·operating·system | ||
| 38 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 39 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 40 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 41 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 42 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 43 | ···········································································bits. | ||
| 37 | ···········································································Use·of·weak·or·untested·encryption | 44 | ···········································································Use·of·weak·or·untested·encryption |
| 38 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of |
| 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| Offset 55, 38 lines modified | Offset 62, 31 lines modified | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | 63 | ······························within·/etc/default/grub·doesn't·contain·the |
| 57 | ······························argument·nosmap.·Run·the·following·command | 64 | ······························argument·nosmap.·Run·the·following·command |
| 58 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 59 | ······························kernels: | 66 | ······························kernels: |
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 61 | ······························args="nosmap" | 68 | ······························args="nosmap" |
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loade | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5·· | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| 76 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. | 76 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. |
| 77 | ······························When·prompted,·enter·the·password·that·was | 77 | ······························When·prompted,·enter·the·password·that·was |
| 78 | ······························selected. | 78 | ······························selected. |
| 79 | ······························The·grub2·boot·loader·should·have·a | 79 | ······························The·grub2·boot·loader·should·have·a |
| 80 | ······························superuser·account·and·password·protection | 80 | ······························superuser·account·and·password·protection |
| 81 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 81 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 82 | ···········································································configuration·ensures·users·with | 82 | ···········································································configuration·ensures·users·with |
| 83 | ····Set· | 83 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 84 | R5·· | 84 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 85 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 85 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| 86 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. | 86 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. |
| 87 | ······························When·prompted,·enter·the·password·that·was | 87 | ······························When·prompted,·enter·the·password·that·was |
| 88 | ······························selected. | 88 | ······························selected. |
| 89 | ······························On·x86·architecture·supporting·VT-d,·the | 89 | ······························On·x86·architecture·supporting·VT-d,·the |
| 90 | ······························IOMMU·manages·the·access·control·policy | 90 | ······························IOMMU·manages·the·access·control·policy |
| Offset 99, 27 lines modified | Offset 99, 14 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·Kernel·page-table·isolation,·add | ||
| 107 | ······························the·argument·pti=on·to·the·default·GRUB·2 | ||
| 108 | ······························command·line·for·the·Linux·operating·system. | ||
| 109 | ······························To·ensure·that·pti=on·is·added·as·a·kernel···Kernel·page-table·isolation·is·a | ||
| 110 | ······························command·line·argument·to·newly·installed·····kernel·feature·that·mitigates·the | ||
| 111 | ····Enable·Kernel·Page-Table··kernels,·add·pti=on·to·the·default·Grub2·····Meltdown·security·vulnerability·and | ||
| 112 | R8··Isolation·(KPTI)··········command·line·for·Linux·operating·systems.····hardens·the·kernel·against·attempts·to | ||
| 113 | ······························Modify·the·line·within·/etc/default/grub·as··bypass·kernel·address·space·layout | ||
| 114 | ······························shown·below:·································randomization·(KASLR). | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·pti=on·..." | ||
| 116 | ······························Run·the·following·command·to·update·command | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·--args="pti=on" | ||
| 119 | ······························The·TPM·security·chip·that·is·available·in | 106 | ······························The·TPM·security·chip·that·is·available·in |
| 120 | ······························most·modern·systems·has·a·hardware·RNG.·It | 107 | ······························most·modern·systems·has·a·hardware·RNG.·It |
| 121 | ······························is·also·used·to·feed·the·entropy·pool,·but | 108 | ······························is·also·used·to·feed·the·entropy·pool,·but |
| 122 | ······························generally·not·credited·entropy.·Use | 109 | ······························generally·not·credited·entropy.·Use |
| 123 | ······························rng_core.default_quality·in·the·kernel | 110 | ······························rng_core.default_quality·in·the·kernel |
| 124 | ······························command·line·to·set·the·trust·level·on·the | 111 | ······························command·line·to·set·the·trust·level·on·the |
| 125 | ······························hardware·generators.·The·trust·level·defines | 112 | ······························hardware·generators.·The·trust·level·defines |
| Offset 146, 89 lines modified | Offset 133, 14 lines modified | ||
| 146 | ······························default/grub·as·shown·below: | 133 | ······························default/grub·as·shown·below: |
| 147 | ······························GRUB_CMDLINE_LINUX="... | 134 | ······························GRUB_CMDLINE_LINUX="... |
| 148 | ······························rng_core.default_quality=500·..." | 135 | ······························rng_core.default_quality=500·..." |
| 149 | ······························Run·the·following·command·to·update·command | 136 | ······························Run·the·following·command·to·update·command |
| 150 | ······························line·for·already·installed·kernels: | 137 | ······························line·for·already·installed·kernels: |
| 151 | ······························#·grubby·--update-kernel=ALL·-- | 138 | ······························#·grubby·--update-kernel=ALL·-- |
| 152 | ······························args="rng_core.default_quality=500" | 139 | ······························args="rng_core.default_quality=500" |
| 153 | ······························A·Machine·Check·Exception·is·an·error | ||
| 154 | ······························generated·by·the·CPU·itdetects·an·error·in | ||
| 155 | ······························itself,·memory·or·I/O·devices.·These·errors | ||
| 156 | ······························may·be·corrected·and·generate·a·check·log | ||
| 157 | ······························entry,·if·an·error·cannot·be·corrected·the | ||
| 158 | ······························kernel·may·panic·or·SIGBUS.·To·force·the | ||
| 159 | ······························kernel·to·panic·on·any·uncorrected·error | ||
| 160 | ······························reported·by·Machine·Check·set·the·MCE | ||
| 161 | ······························tolerance·to·zero·by·adding·mce=0·to·the·····Allowing·uncorrected·errors·to·result | ||
| 162 | R8··Force·kernel·panic·on·····default·GRUB·2·command·line·for·the·Linux····on·a·SIGBUS·may·allow·an·attacker·to | ||
| 163 | ····uncorrected·MCEs··········operating·system.·To·ensure·that·mce=0·is····continue·trying·to·exploit·a | ||
| 164 | ······························added·as·a·kernel·command·line·argument·to···vulnerability·such·as·Rowhammer. | ||
| 165 | ······························newly·installed·kernels,·add·mce=0·to·the | ||
| 166 | ······························default·Grub2·command·line·for·Linux | ||
| 167 | ······························operating·systems.·Modify·the·line·within·/ | ||
| 168 | ······························etc/default/grub·as·shown·below: | ||
| 169 | ······························GRUB_CMDLINE_LINUX="...·mce=0·..." | ||
| 170 | ······························Run·the·following·command·to·update·command | ||
| 171 | ······························line·for·already·installed·kernels: | ||
| 172 | ······························#·grubby·--update-kernel=ALL·--args="mce=0" | ||
| 173 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 174 | ······························vulnerability·which·allows·unprivileged | ||
| 175 | ······························speculative·access·to·data·which·is | ||
| 176 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 177 | ······························page·table·entry·isn't·present.·Select·the | ||
| 178 | ······························appropriate·mitigation·by·adding·the | ||
| 179 | ······························argument·l1tf=flush·to·the·default·GRUB·2 | ||
| 180 | ······························command·line·for·the·Linux·operating·system. | ||
| 181 | ······························To·ensure·that·l1tf=flush·is·added·as·a······The·L1TF·vulnerability·allows·an | ||
| 182 | ······························kernel·command·line·argument·to·newly········attacker·to·bypass·memory·access | ||
| 183 | ····Configure·L1·Terminal·····installed·kernels,·add·l1tf=flush·to·the·····security·controls·imposed·by·the | ||
| Max diff block lines reached; 650022/665360 bytes (97.69%) of diff not shown. | |||
| Offset 40, 57 lines modified | Offset 40, 14 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·7's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td>Disable·SSH·Root·Login</td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········The·root·user·should·never·be·allowed·to·login·to·a | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 94 | system·directly·over·a·network. | 51 | system·directly·over·a·network. |
| 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 104, 72 lines modified | Offset 61, 14 lines modified | ||
| 104 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 107 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 108 | ······</td> | 65 | ······</td> |
| 109 | ····</tr> | 66 | ····</tr> |
| 110 | ····<tr> | 67 | ····<tr> |
| 111 | ······<td>3.1.1</td> | ||
| 112 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 113 | ······<td·xml:lang="en-US"> | ||
| 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 119 | <pre>[daemon] | ||
| 120 | AutomaticLoginEnable=false</pre> | ||
| 121 | ······</td> | ||
| 122 | ······<td·xml:lang="en-US"> | ||
| 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 124 | system·security. | ||
| 125 | ······</td> | ||
| 126 | ····</tr> | ||
| 127 | ····<tr> | ||
| 128 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 147 | ······<td>Verify·Only·Root·Has·UID·0</td> | ||
| 148 | ······<td·xml:lang="en-US"> | ||
| 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 151 | their·UID·changed. | ||
| 152 | <br·/> | ||
| 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 154 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 155 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 156 | assigned. | ||
| 157 | ······</td> | ||
| 158 | ······<td·xml:lang="en-US"> | ||
| 159 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 160 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 161 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 162 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 163 | access·to·root·privileges·in·an·accountable·manner. | ||
| 164 | ······</td> | ||
| 165 | ····</tr> | ||
| 166 | ····<tr> | ||
| 167 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 168 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> | 69 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> |
| 169 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 170 | ········Disallow·SSH·login·with·empty·passwords. | 71 | ········Disallow·SSH·login·with·empty·passwords. |
| Max diff block lines reached; 463309/468586 bytes (98.87%) of diff not shown. | |||
| Offset 7705, 18 lines modified | Offset 7705, 18 lines modified | ||
| 0001e180:·776f·7264·7320·6865·6c70·7320·656e·7375··words·helps·ensu | 0001e180:·776f·7264·7320·6865·6c70·7320·656e·7375··words·helps·ensu | ||
| 0001e190:·7265·2074·6861·7420·6120·636f·6d70·726f··re·that·a·compro | 0001e190:·7265·2074·6861·7420·6120·636f·6d70·726f··re·that·a·compro | ||
| 0001e1a0:·6d69·7365·6420·7061·7373·776f·7264·2069··mised·password·i | 0001e1a0:·6d69·7365·6420·7061·7373·776f·7264·2069··mised·password·i | ||
| 0001e1b0:·7320·6e6f·740a·7265·2d75·7365·6420·6279··s·not.re-used·by | 0001e1b0:·7320·6e6f·740a·7265·2d75·7365·6420·6279··s·not.re-used·by | ||
| 0001e1c0:·2061·2075·7365·722e·0a20·203c·2f74·643e···a·user..··</td> | 0001e1c0:·2061·2075·7365·722e·0a20·203c·2f74·643e···a·user..··</td> | ||
| 0001e1d0:·0a20·203c·7464·3e76·6172·5f70·6173·7377··.··<td>var_passw | 0001e1d0:·0a20·203c·7464·3e76·6172·5f70·6173·7377··.··<td>var_passw | ||
| 0001e1e0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | 0001e1e0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | ||
| 0001e1f0:·3d35·3c62·722f·3e76·6172·5f70·6173·7377··=5<br/>var_passw | |||
| 0001e200:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | |||
| 0001e | 0001e210:·5f63·6f6e·7472·6f6c·5f66·6c61·673d·7265··_control_flag=re | ||
| 0001e200:·7175·6972·6564·3c62·722f·3e76·6172·5f70··quired<br/>var_p | |||
| 0001e210:·6173·7377·6f72·645f·7061·6d5f·7265·6d65··assword_pam_reme | |||
| 0001e220:· | 0001e220:·7175·6972·6564·3c2f·7464·3e0a·3c2f·7472··quired</td>.</tr | ||
| 0001e230:·3e0a·3c74·723e·0a20·203c·7464·3e49·412d··>.<tr>.··<td>IA- | 0001e230:·3e0a·3c74·723e·0a20·203c·7464·3e49·412d··>.<tr>.··<td>IA- | ||
| 0001e240:·3528·6629·3c62·722f·3e49·412d·3528·3129··5(f)<br/>IA-5(1) | 0001e240:·3528·6629·3c62·722f·3e49·412d·3528·3129··5(f)<br/>IA-5(1) | ||
| 0001e250:·2865·293c·2f74·643e·0a20·203c·7464·3e4e··(e)</td>.··<td>N | 0001e250:·2865·293c·2f74·643e·0a20·203c·7464·3e4e··(e)</td>.··<td>N | ||
| 0001e260:·2f41·3c2f·7464·3e0a·2020·3c74·643e·4c69··/A</td>.··<td>Li | 0001e260:·2f41·3c2f·7464·3e0a·2020·3c74·643e·4c69··/A</td>.··<td>Li | ||
| 0001e270:·6d69·7420·5061·7373·776f·7264·2052·6575··mit·Password·Reu | 0001e270:·6d69·7420·5061·7373·776f·7264·2052·6575··mit·Password·Reu | ||
| 0001e280:·7365·3a20·7379·7374·656d·2d61·7574·683c··se:·system-auth< | 0001e280:·7365·3a20·7379·7374·656d·2d61·7574·683c··se:·system-auth< | ||
| 0001e290:·2f74·643e·0a20·203c·7464·2078·6d6c·3a6c··/td>.··<td·xml:l | 0001e290:·2f74·643e·0a20·203c·7464·2078·6d6c·3a6c··/td>.··<td·xml:l | ||
| Offset 7754, 19 lines modified | Offset 7754, 19 lines modified | ||
| 0001e490:·6576·696f·7573·2070·6173·7377·6f72·6473··evious·passwords | 0001e490:·6576·696f·7573·2070·6173·7377·6f72·6473··evious·passwords | ||
| 0001e4a0:·2068·656c·7073·2065·6e73·7572·6520·7468···helps·ensure·th | 0001e4a0:·2068·656c·7073·2065·6e73·7572·6520·7468···helps·ensure·th | ||
| 0001e4b0:·6174·2061·2063·6f6d·7072·6f6d·6973·6564··at·a·compromised | 0001e4b0:·6174·2061·2063·6f6d·7072·6f6d·6973·6564··at·a·compromised | ||
| 0001e4c0:·2070·6173·7377·6f72·6420·6973·206e·6f74···password·is·not | 0001e4c0:·2070·6173·7377·6f72·6420·6973·206e·6f74···password·is·not | ||
| 0001e4d0:·0a72·652d·7573·6564·2062·7920·6120·7573··.re-used·by·a·us | 0001e4d0:·0a72·652d·7573·6564·2062·7920·6120·7573··.re-used·by·a·us | ||
| 0001e4e0:·6572·2e0a·2020·3c2f·7464·3e0a·2020·3c74··er..··</td>.··<t | 0001e4e0:·6572·2e0a·2020·3c2f·7464·3e0a·2020·3c74··er..··</td>.··<t | ||
| 0001e4f0:·643e·7661·725f·7061·7373·776f·7264·5f70··d>var_password_p | 0001e4f0:·643e·7661·725f·7061·7373·776f·7264·5f70··d>var_password_p | ||
| 0001e500:·616d·5f72·656d·656d·6265·723d·353c·6272··am_remember=5<br | |||
| 0001e510:·2f3e·7661·725f·7061·7373·776f·7264·5f70··/>var_password_p | |||
| 0001e5 | 0001e520:·616d·5f72·656d·656d·6265·725f·636f·6e74··am_remember_cont | ||
| 0001e5 | 0001e530:·726f·6c5f·666c·6167·3d72·6571·7569·7265··rol_flag=require | ||
| 0001e520:·643c·6272·2f3e·7661·725f·7061·7373·776f··d<br/>var_passwo | |||
| 0001e530:·7264·5f70·616d·5f72·656d·656d·6265·723d··rd_pam_remember= | |||
| 0001e540:· | 0001e540:·643c·2f74·643e·0a3c·2f74·723e·0a3c·7472··d</td>.</tr>.<tr | ||
| 0001e550:·3e0a·2020·3c74·643e·4941·2d35·2863·293c··>.··<td>IA-5(c)< | 0001e550:·3e0a·2020·3c74·643e·4941·2d35·2863·293c··>.··<td>IA-5(c)< | ||
| 0001e560:·6272·2f3e·4941·2d35·2831·2928·6129·3c62··br/>IA-5(1)(a)<b | 0001e560:·6272·2f3e·4941·2d35·2831·2928·6129·3c62··br/>IA-5(1)(a)<b | ||
| 0001e570:·722f·3e43·4d2d·3628·6129·3c62·722f·3e49··r/>CM-6(a)<br/>I | 0001e570:·722f·3e43·4d2d·3628·6129·3c62·722f·3e49··r/>CM-6(a)<br/>I | ||
| 0001e580:·412d·3528·3429·3c2f·7464·3e0a·2020·3c74··A-5(4)</td>.··<t | 0001e580:·412d·3528·3429·3c2f·7464·3e0a·2020·3c74··A-5(4)</td>.··<t | ||
| 0001e590:·643e·4e2f·413c·2f74·643e·0a20·203c·7464··d>N/A</td>.··<td | 0001e590:·643e·4e2f·413c·2f74·643e·0a20·203c·7464··d>N/A</td>.··<td | ||
| 0001e5a0:·3e45·6e73·7572·6520·5041·4d20·456e·666f··>Ensure·PAM·Enfo | 0001e5a0:·3e45·6e73·7572·6520·5041·4d20·456e·666f··>Ensure·PAM·Enfo | ||
| 0001e5b0:·7263·6573·2050·6173·7377·6f72·6420·5265··rces·Password·Re | 0001e5b0:·7263·6573·2050·6173·7377·6f72·6420·5265··rces·Password·Re | ||
| Offset 8613, 18 lines modified | Offset 8613, 18 lines modified | ||
| 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021ab0:·725f·736e·6d70·645f·72 | 00021ab0:·725f·736e·6d70·645f·7277·5f73·7472·696e··r_snmpd_rw_strin | ||
| 00021ac0:·673d·6368·616e·6765·6d65·72 | 00021ac0:·673d·6368·616e·6765·6d65·7277·3c62·722f··g=changemerw<br/ | ||
| 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72· | 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72·6f5f·7374··>var_snmpd_ro_st | ||
| 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572·6f3c··ring=changemero< | ||
| 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2580, 28 lines modified | Offset 2580, 28 lines modified | ||
| 2580 | ··············································································ensuring·a·larger | 2580 | ··············································································ensuring·a·larger |
| 2581 | ··············································································search·space. | 2581 | ··············································································search·space. |
| 2582 | ··································Do·not·allow·users·to·reuse·recent | 2582 | ··································Do·not·allow·users·to·reuse·recent |
| 2583 | ··································passwords.·This·can·be·accomplished·by | 2583 | ··································passwords.·This·can·be·accomplished·by |
| 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2585 | ··································pam_pwhistory·PAM·module.···················of·previous | 2585 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2586 | IA-5(f)·······································································passwords·helps | 2586 | IA-5(f)·······································································passwords·helps |
| 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember | 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember=5 |
| 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember= | 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember_control_flag=required |
| 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2590 | ··············································································used·by·a·user. | 2590 | ··············································································used·by·a·user. |
| 2591 | ··································For·example: | 2591 | ··································For·example: |
| 2592 | ··································password·required·pam_pwhistory.so | 2592 | ··································password·required·pam_pwhistory.so |
| 2593 | ··································use_authtok·remember=5 | 2593 | ··································use_authtok·remember=5 |
| 2594 | ··································Do·not·allow·users·to·reuse·recent | 2594 | ··································Do·not·allow·users·to·reuse·recent |
| 2595 | ··································passwords.·This·can·be·accomplished·by | 2595 | ··································passwords.·This·can·be·accomplished·by |
| 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2597 | ··································pam_pwhistory·PAM·module.···················of·previous | 2597 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2598 | IA-5(f)·······································································passwords·helps | 2598 | IA-5(f)·······································································passwords·helps |
| 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember | 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember=5 |
| 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember= | 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember_control_flag=required |
| 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2602 | ··············································································used·by·a·user. | 2602 | ··············································································used·by·a·user. |
| 2603 | ··································For·example: | 2603 | ··································For·example: |
| 2604 | ··································password·required·pam_pwhistory.so | 2604 | ··································password·required·pam_pwhistory.so |
| 2605 | ··································use_authtok·remember=5 | 2605 | ··································use_authtok·remember=5 |
| 2606 | ··············································································Use·of·a·complex | 2606 | ··············································································Use·of·a·complex |
| 2607 | ··············································································password·helps·to | 2607 | ··············································································password·helps·to |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_rw_string=changemerw |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_ro_string=changemero |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 7706, 18 lines modified | Offset 7706, 18 lines modified | ||
| 0001e190:·7373·776f·7264·7320·6865·6c70·7320·656e··sswords·helps·en | 0001e190:·7373·776f·7264·7320·6865·6c70·7320·656e··sswords·helps·en | ||
| 0001e1a0:·7375·7265·2074·6861·7420·6120·636f·6d70··sure·that·a·comp | 0001e1a0:·7375·7265·2074·6861·7420·6120·636f·6d70··sure·that·a·comp | ||
| 0001e1b0:·726f·6d69·7365·6420·7061·7373·776f·7264··romised·password | 0001e1b0:·726f·6d69·7365·6420·7061·7373·776f·7264··romised·password | ||
| 0001e1c0:·2069·7320·6e6f·740a·7265·2d75·7365·6420···is·not.re-used· | 0001e1c0:·2069·7320·6e6f·740a·7265·2d75·7365·6420···is·not.re-used· | ||
| 0001e1d0:·6279·2061·2075·7365·722e·0a20·203c·2f74··by·a·user..··</t | 0001e1d0:·6279·2061·2075·7365·722e·0a20·203c·2f74··by·a·user..··</t | ||
| 0001e1e0:·643e·0a20·203c·7464·3e76·6172·5f70·6173··d>.··<td>var_pas | 0001e1e0:·643e·0a20·203c·7464·3e76·6172·5f70·6173··d>.··<td>var_pas | ||
| 0001e1f0:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | 0001e1f0:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | ||
| 0001e200:·6572·3d35·3c62·722f·3e76·6172·5f70·6173··er=5<br/>var_pas | |||
| 0001e210:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | |||
| 0001e2 | 0001e200:·6572·5f63·6f6e·7472·6f6c·5f66·6c61·673d··er_control_flag= | ||
| 0001e2 | 0001e210:·7265·7175·6972·6564·3c62·722f·3e76·6172··required<br/>var | ||
| 0001e220:·5f70·6173·7377·6f72·645f·7061·6d5f·7265··_password_pam_re | |||
| 0001e230:·6d65·6d62·6572·3d35·3c2f·7464·3e0a·3c2f··member=5</td>.</ | |||
| 0001e240:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | 0001e240:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | ||
| 0001e250:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | 0001e250:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | ||
| 0001e260:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | 0001e260:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | ||
| 0001e270:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | 0001e270:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | ||
| 0001e280:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | 0001e280:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | ||
| 0001e290:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | 0001e290:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | ||
| 0001e2a0:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | 0001e2a0:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | ||
| Offset 7755, 19 lines modified | Offset 7755, 19 lines modified | ||
| 0001e4a0:·7072·6576·696f·7573·2070·6173·7377·6f72··previous·passwor | 0001e4a0:·7072·6576·696f·7573·2070·6173·7377·6f72··previous·passwor | ||
| 0001e4b0:·6473·2068·656c·7073·2065·6e73·7572·6520··ds·helps·ensure· | 0001e4b0:·6473·2068·656c·7073·2065·6e73·7572·6520··ds·helps·ensure· | ||
| 0001e4c0:·7468·6174·2061·2063·6f6d·7072·6f6d·6973··that·a·compromis | 0001e4c0:·7468·6174·2061·2063·6f6d·7072·6f6d·6973··that·a·compromis | ||
| 0001e4d0:·6564·2070·6173·7377·6f72·6420·6973·206e··ed·password·is·n | 0001e4d0:·6564·2070·6173·7377·6f72·6420·6973·206e··ed·password·is·n | ||
| 0001e4e0:·6f74·0a72·652d·7573·6564·2062·7920·6120··ot.re-used·by·a· | 0001e4e0:·6f74·0a72·652d·7573·6564·2062·7920·6120··ot.re-used·by·a· | ||
| 0001e4f0:·7573·6572·2e0a·2020·3c2f·7464·3e0a·2020··user..··</td>.·· | 0001e4f0:·7573·6572·2e0a·2020·3c2f·7464·3e0a·2020··user..··</td>.·· | ||
| 0001e500:·3c74·643e·7661·725f·7061·7373·776f·7264··<td>var_password | 0001e500:·3c74·643e·7661·725f·7061·7373·776f·7264··<td>var_password | ||
| 0001e510:·5f70·616d·5f72·656d·656d·6265·723d·353c··_pam_remember=5< | |||
| 0001e520:·6272·2f3e·7661·725f·7061·7373·776f·7264··br/>var_password | |||
| 0001e5 | 0001e510:·5f70·616d·5f72·656d·656d·6265·725f·636f··_pam_remember_co | ||
| 0001e5 | 0001e520:·6e74·726f·6c5f·666c·6167·3d72·6571·7569··ntrol_flag=requi | ||
| 0001e530:·7265·643c·6272·2f3e·7661·725f·7061·7373··red<br/>var_pass | |||
| 0001e540:·776f·7264·5f70·616d·5f72·656d·656d·6265··word_pam_remembe | |||
| 0001e550:·72 | 0001e550:·723d·353c·2f74·643e·0a3c·2f74·723e·0a3c··r=5</td>.</tr>.< | ||
| 0001e560:·7472·3e0a·2020·3c74·643e·4941·2d35·2863··tr>.··<td>IA-5(c | 0001e560:·7472·3e0a·2020·3c74·643e·4941·2d35·2863··tr>.··<td>IA-5(c | ||
| 0001e570:·293c·6272·2f3e·4941·2d35·2831·2928·6129··)<br/>IA-5(1)(a) | 0001e570:·293c·6272·2f3e·4941·2d35·2831·2928·6129··)<br/>IA-5(1)(a) | ||
| 0001e580:·3c62·722f·3e43·4d2d·3628·6129·3c62·722f··<br/>CM-6(a)<br/ | 0001e580:·3c62·722f·3e43·4d2d·3628·6129·3c62·722f··<br/>CM-6(a)<br/ | ||
| 0001e590:·3e49·412d·3528·3429·3c2f·7464·3e0a·2020··>IA-5(4)</td>.·· | 0001e590:·3e49·412d·3528·3429·3c2f·7464·3e0a·2020··>IA-5(4)</td>.·· | ||
| 0001e5a0:·3c74·643e·4e2f·413c·2f74·643e·0a20·203c··<td>N/A</td>.··< | 0001e5a0:·3c74·643e·4e2f·413c·2f74·643e·0a20·203c··<td>N/A</td>.··< | ||
| 0001e5b0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | 0001e5b0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | ||
| 0001e5c0:·666f·7263·6573·2050·6173·7377·6f72·6420··forces·Password· | 0001e5c0:·666f·7263·6573·2050·6173·7377·6f72·6420··forces·Password· | ||
| Offset 8614, 19 lines modified | Offset 8614, 19 lines modified | ||
| 00021a50:·6f72·6b0a·616e·6420·7573·6520·7468·6520··ork.and·use·the· | 00021a50:·6f72·6b0a·616e·6420·7573·6520·7468·6520··ork.and·use·the· | ||
| 00021a60:·696e·666f·726d·6174·696f·6e20·746f·2070··information·to·p | 00021a60:·696e·666f·726d·6174·696f·6e20·746f·2070··information·to·p | ||
| 00021a70:·6f74·656e·7469·616c·6c79·2063·6f6d·7072··otentially·compr | 00021a70:·6f74·656e·7469·616c·6c79·2063·6f6d·7072··otentially·compr | ||
| 00021a80:·6f6d·6973·6520·7468·6520·696e·7465·6772··omise·the·integr | 00021a80:·6f6d·6973·6520·7468·6520·696e·7465·6772··omise·the·integr | ||
| 00021a90:·6974·7920·6f66·2074·6865·2073·7973·7465··ity·of·the·syste | 00021a90:·6974·7920·6f66·2074·6865·2073·7973·7465··ity·of·the·syste | ||
| 00021aa0:·6d20·616e·640a·6e65·7477·6f72·6b28·7329··m·and.network(s) | 00021aa0:·6d20·616e·640a·6e65·7477·6f72·6b28·7329··m·and.network(s) | ||
| 00021ab0:·2e0a·2020·3c2f·7464·3e0a·2020·3c74·643e··..··</td>.··<td> | 00021ab0:·2e0a·2020·3c2f·7464·3e0a·2020·3c74·643e··..··</td>.··<td> | ||
| 00021ac0:·7661·725f·736e·6d70·645f·72 | 00021ac0:·7661·725f·736e·6d70·645f·726f·5f73·7472··var_snmpd_ro_str | ||
| 00021ad0:·696e·673d·6368·616e·6765·6d65·72 | 00021ad0:·696e·673d·6368·616e·6765·6d65·726f·3c62··ing=changemero<b | ||
| 00021ae0:·722f·3e76·6172·5f73·6e6d·7064·5f72· | 00021ae0:·722f·3e76·6172·5f73·6e6d·7064·5f72·775f··r/>var_snmpd_rw_ | ||
| 00021af0:·7374·7269·6e67·3d63·6861·6e67·656d·6572··string=changemer | 00021af0:·7374·7269·6e67·3d63·6861·6e67·656d·6572··string=changemer | ||
| 00021b00:· | 00021b00:·773c·2f74·643e·0a3c·2f74·723e·0a3c·7472··w</td>.</tr>.<tr | ||
| 00021b10:·3e0a·2020·3c74·643e·5343·2d35·3c2f·7464··>.··<td>SC-5</td | 00021b10:·3e0a·2020·3c74·643e·5343·2d35·3c2f·7464··>.··<td>SC-5</td | ||
| 00021b20:·3e0a·2020·3c74·643e·4e2f·413c·2f74·643e··>.··<td>N/A</td> | 00021b20:·3e0a·2020·3c74·643e·4e2f·413c·2f74·643e··>.··<td>N/A</td> | ||
| 00021b30:·0a20·203c·7464·3e43·6f6e·6669·6775·7265··.··<td>Configure | 00021b30:·0a20·203c·7464·3e43·6f6e·6669·6775·7265··.··<td>Configure | ||
| 00021b40:·204b·6572·6e65·6c20·746f·2052·6174·6520···Kernel·to·Rate· | 00021b40:·204b·6572·6e65·6c20·746f·2052·6174·6520···Kernel·to·Rate· | ||
| 00021b50:·4c69·6d69·7420·5365·6e64·696e·6720·6f66··Limit·Sending·of | 00021b50:·4c69·6d69·7420·5365·6e64·696e·6720·6f66··Limit·Sending·of | ||
| 00021b60:·2044·7570·6c69·6361·7465·2054·4350·2041···Duplicate·TCP·A | 00021b60:·2044·7570·6c69·6361·7465·2054·4350·2041···Duplicate·TCP·A | ||
| 00021b70:·636b·6e6f·776c·6564·676d·656e·7473·3c2f··cknowledgments</ | 00021b70:·636b·6e6f·776c·6564·676d·656e·7473·3c2f··cknowledgments</ |
| Offset 2580, 28 lines modified | Offset 2580, 28 lines modified | ||
| 2580 | ··············································································ensuring·a·larger | 2580 | ··············································································ensuring·a·larger |
| 2581 | ··············································································search·space. | 2581 | ··············································································search·space. |
| 2582 | ··································Do·not·allow·users·to·reuse·recent | 2582 | ··································Do·not·allow·users·to·reuse·recent |
| 2583 | ··································passwords.·This·can·be·accomplished·by | 2583 | ··································passwords.·This·can·be·accomplished·by |
| 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2585 | ··································pam_pwhistory·PAM·module.···················of·previous | 2585 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2586 | IA-5(f)·······································································passwords·helps | 2586 | IA-5(f)·······································································passwords·helps |
| 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember= | 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember_control_flag=required |
| 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember | 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember=5 |
| 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2590 | ··············································································used·by·a·user. | 2590 | ··············································································used·by·a·user. |
| 2591 | ··································For·example: | 2591 | ··································For·example: |
| 2592 | ··································password·required·pam_pwhistory.so | 2592 | ··································password·required·pam_pwhistory.so |
| 2593 | ··································use_authtok·remember=5 | 2593 | ··································use_authtok·remember=5 |
| 2594 | ··································Do·not·allow·users·to·reuse·recent | 2594 | ··································Do·not·allow·users·to·reuse·recent |
| 2595 | ··································passwords.·This·can·be·accomplished·by | 2595 | ··································passwords.·This·can·be·accomplished·by |
| 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2597 | ··································pam_pwhistory·PAM·module.···················of·previous | 2597 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2598 | IA-5(f)·······································································passwords·helps | 2598 | IA-5(f)·······································································passwords·helps |
| 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember= | 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember_control_flag=required |
| 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember | 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember=5 |
| 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2602 | ··············································································used·by·a·user. | 2602 | ··············································································used·by·a·user. |
| 2603 | ··································For·example: | 2603 | ··································For·example: |
| 2604 | ··································password·required·pam_pwhistory.so | 2604 | ··································password·required·pam_pwhistory.so |
| 2605 | ··································use_authtok·remember=5 | 2605 | ··································use_authtok·remember=5 |
| 2606 | ··············································································Use·of·a·complex | 2606 | ··············································································Use·of·a·complex |
| 2607 | ··············································································password·helps·to | 2607 | ··············································································password·helps·to |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_ro_string=changemero |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_rw_string=changemerw |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 66, 14846 lines modified | Offset 66, 14846 lines modified | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | Diff chunk too large, falling back to line-by-line diff (1929 lines added, 1929 lines removed) | |
| 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:·2020·2020·2020·3c74·643e· | 00000480:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000490:·20 | 00000490:·2041·6e79·2041·7474·656d·7074·7320·746f···Any·Attempts·to | ||
| 000004a0:·20 | 000004a0:·2052·756e·2063·6863·6f6e·3c2f·7464·3e0a···Run·chcon</td>. | ||
| 000004b0:· | 000004b0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000004c0:·6 | 000004c0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000004d0:·20 | 000004d0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| 000004e0:· | 000004e0:·2c20·7468·6520·6175·6469·7420·7379·7374··,·the·audit·syst | ||
| 000004f0:·6 | 000004f0:·656d·2073·686f·756c·6420·636f·6c6c·6563··em·should·collec | ||
| 00000500:· | 00000500:·7420·616e·7920·6578·6563·7574·696f·6e20··t·any·execution· | ||
| 00000510:·7 | 00000510:·6174·7465·6d70·740a·6f66·2074·6865·203c··attempt.of·the·< | ||
| 00000520:·7 | 00000520:·7474·3e63·6863·6f6e·3c2f·7474·3e20·636f··tt>chcon</tt>·co | ||
| 00000530:·6 | 00000530:·6d6d·616e·6420·666f·7220·616c·6c20·7573··mmand·for·all·us | ||
| 00000540:·6 | 00000540:·6572·7320·616e·6420·726f·6f74·2e20·4966··ers·and·root.·If | ||
| 00000550:· | 00000550:·2074·6865·203c·7474·3e61·7564·6974·643c···the·<tt>auditd< | ||
| 00000560:·2 | 00000560:·2f74·743e·0a64·6165·6d6f·6e20·6973·2063··/tt>.daemon·is·c | ||
| 00000570:· | 00000570:·6f6e·6669·6775·7265·6420·746f·2075·7365··onfigured·to·use | ||
| 00000580:·746 | 00000580:·2074·6865·203c·7474·3e61·7567·656e·7275···the·<tt>augenru | ||
| 00000590:· | 00000590:·6c65·733c·2f74·743e·2070·726f·6772·616d··les</tt>·program | ||
| 000005a0:· | 000005a0:·2074·6f20·7265·6164·2061·7564·6974·2072···to·read·audit·r | ||
| 000005b0:· | 000005b0:·756c·6573·0a64·7572·696e·6720·6461·656d··ules.during·daem | ||
| 000005c0:· | 000005c0:·6f6e·2073·7461·7274·7570·2028·7468·6520··on·startup·(the· | ||
| 000005d0:· | 000005d0:·6465·6661·756c·7429·2c20·6164·6420·7468··default),·add·th | ||
| 000005e0:·6 | 000005e0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 000005f0:· | 000005f0:·7320·746f·2061·2066·696c·6520·7769·7468··s·to·a·file·with | ||
| 00000600:·20 | 00000600:·2073·7566·6669·780a·3c74·743e·2e72·756c···suffix.<tt>.rul | ||
| 00000610:·6 | 00000610:·6573·3c2f·7474·3e20·696e·2074·6865·2064··es</tt>·in·the·d | ||
| 00000620:· | 00000620:·6972·6563·746f·7279·203c·7474·3e2f·6574··irectory·<tt>/et | ||
| 00000630:·6 | 00000630:·632f·6175·6469·742f·7275·6c65·732e·643c··c/audit/rules.d< | ||
| 00000640:· | 00000640:·2f74·743e·3a0a·3c70·7265·3e2d·6120·616c··/tt>:.<pre>-a·al | ||
| 00000650:·7 | 00000650:·7761·7973·2c65·7869·7420·2d46·2070·6174··ways,exit·-F·pat | ||
| 00000660:·6 | 00000660:·683d·2f75·7372·2f62·696e·2f63·6863·6f6e··h=/usr/bin/chcon | ||
| 00000670:· | 00000670:·202d·4620·7065·726d·3d78·202d·4620·6175···-F·perm=x·-F·au | ||
| 00000680:· | 00000680:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000690:·7 | 00000690:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000006a0:·7 | 000006a0:·793d·7072·6976·696c·6567·6564·3c2f·7072··y=privileged</pr | ||
| 000006b0:· | 000006b0:·653e·0a49·6620·7468·6520·3c74·743e·6175··e>.If·the·<tt>au | ||
| 000006c0:· | 000006c0:·6469·7464·3c2f·7474·3e20·6461·656d·6f6e··ditd</tt>·daemon | ||
| 000006d0:· | 000006d0:·2069·7320·636f·6e66·6967·7572·6564·2074···is·configured·t | ||
| 000006e0:· | 000006e0:·6f20·7573·6520·7468·6520·3c74·743e·6175··o·use·the·<tt>au | ||
| 000006f0:· | 000006f0:·6469·7463·746c·3c2f·7474·3e0a·7574·696c··ditctl</tt>.util | ||
| 00000700:· | 00000700:·6974·7920·746f·2072·6561·6420·6175·6469··ity·to·read·audi | ||
| 00000710:·7 | 00000710:·7420·7275·6c65·7320·6475·7269·6e67·2064··t·rules·during·d | ||
| 00000720:· | 00000720:·6165·6d6f·6e20·7374·6172·7475·702c·2061··aemon·startup,·a | ||
| 00000730:· | 00000730:·6464·2074·6865·2066·6f6c·6c6f·7769·6e67··dd·the·following | ||
| 00000740:· | 00000740:·206c·696e·6573·2074·6f0a·3c74·743e·2f65···lines·to.<tt>/e | ||
| 00000750:·7 | 00000750:·7463·2f61·7564·6974·2f61·7564·6974·2e72··tc/audit/audit.r | ||
| 00000760:· | 00000760:·756c·6573·3c2f·7474·3e20·6669·6c65·3a0a··ules</tt>·file:. | ||
| 00000770:· | 00000770:·3c70·7265·3e2d·6120·616c·7761·7973·2c65··<pre>-a·always,e | ||
| 00000780:· | 00000780:·7869·7420·2d46·2070·6174·683d·2f75·7372··xit·-F·path=/usr | ||
| 00000790:·2 | 00000790:·2f62·696e·2f63·6863·6f6e·202d·4620·7065··/bin/chcon·-F·pe | ||
| 000007a0:· | 000007a0:·726d·3d78·202d·4620·6175·6964·2667·743b··rm=x·-F·auid> | ||
| 000007b0:·3 | 000007b0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000007c0:· | 000007c0:·6e73·6574·202d·4620·6b65·793d·7072·6976··nset·-F·key=priv | ||
| 000007d0:· | 000007d0:·696c·6567·6564·3c2f·7072·653e·0a20·2020··ileged</pre>.··· | ||
| 000007e0:· | 000007e0:·2020·203c·2f74·643e·0a20·2020·2020·203c·····</td>.······< | ||
| 000007f0:·46 | 000007f0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000800:· | 00000800:·5553·223e·0a20·2020·2020·2020·204d·6973··US">.········Mis | ||
| 00000810:· | 00000810:·7573·6520·6f66·2070·7269·7669·6c65·6765··use·of·privilege | ||
| 00000820:· | 00000820:·6420·6675·6e63·7469·6f6e·732c·2065·6974··d·functions,·eit | ||
| 00000830:· | 00000830:·6865·7220·696e·7465·6e74·696f·6e61·6c6c··her·intentionall | ||
| 00000840:· | 00000840:·7920·6f72·2075·6e69·6e74·656e·7469·6f6e··y·or·unintention | ||
| 00000850:· | 00000850:·616c·6c79·2062·790a·6175·7468·6f72·697a··ally·by.authoriz | ||
| 00000860:·20 | 00000860:·6564·2075·7365·7273·2c20·6f72·2062·7920··ed·users,·or·by· | ||
| 00000870:· | 00000870:·756e·6175·7468·6f72·697a·6564·2065·7874··unauthorized·ext | ||
| 00000880:· | 00000880:·6572·6e61·6c20·656e·7469·7469·6573·2074··ernal·entities·t | ||
| 00000890:·6 | 00000890:·6861·7420·6861·7665·2063·6f6d·7072·6f6d··hat·have·comprom | ||
| 000008a0:· | 000008a0:·6973·6564·2073·7973·7465·6d20·6163·636f··ised·system·acco | ||
| 000008b0:· | 000008b0:·756e·7473·2c0a·6973·2061·2073·6572·696f··unts,.is·a·serio | ||
| 000008c0:· | 000008c0:·7573·2061·6e64·206f·6e67·6f69·6e67·2063··us·and·ongoing·c | ||
| 000008d0:· | 000008d0:·6f6e·6365·726e·2061·6e64·2063·616e·2068··oncern·and·can·h | ||
| 000008e0:·6 | 000008e0:·6176·6520·7369·676e·6966·6963·616e·7420··ave·significant· | ||
| 000008f0:· | 000008f0:·6164·7665·7273·6520·696d·7061·6374·7320··adverse·impacts· | ||
| 00000900:·6 | 00000900:·6f6e·206f·7267·616e·697a·6174·696f·6e73··on·organizations | ||
| 00000910:· | 00000910:·2e0a·4175·6469·7469·6e67·2074·6865·2075··..Auditing·the·u | ||
| 00000920:· | 00000920:·7365·206f·6620·7072·6976·696c·6567·6564··se·of·privileged | ||
| 00000930:· | 00000930:·2066·756e·6374·696f·6e73·2069·7320·6f6e···functions·is·on | ||
| 00000940:·6 | 00000940:·6520·7761·7920·746f·2064·6574·6563·7420··e·way·to·detect· | ||
| 00000950:· | 00000950:·7375·6368·206d·6973·7573·6520·616e·6420··such·misuse·and· | ||
| 00000960:·696 | 00000960:·6964·656e·7469·6679·0a74·6865·2072·6973··identify.the·ris | ||
| 00000970:·6 | 00000970:·6b20·6672·6f6d·2069·6e73·6964·6572·2061··k·from·insider·a | ||
| 00000980:·6 | 00000980:·6e64·2061·6476·616e·6365·6420·7065·7273··nd·advanced·pers | ||
| 00000990:·73 | 00000990:·6973·7465·6e74·2074·6872·6561·7473·2e0a··istent·threats.. | ||
| 000009a0:· | 000009a0:·3c62·7220·2f3e·3c62·7220·2f3e·0a50·7269··<br·/><br·/>.Pri | ||
| 000009b0:· | 000009b0:·7669·6c65·6765·6420·7072·6f67·7261·6d73··vileged·programs | ||
| 000009c0:·20 | 000009c0:·2061·7265·2073·7562·6a65·6374·2074·6f20···are·subject·to· | ||
| 000009d0:·657 | 000009d0:·6573·6361·6c61·7469·6f6e·2d6f·662d·7072··escalation-of-pr | ||
| 000009e0:· | 000009e0:·6976·696c·6567·6520·6174·7461·636b·732c··ivilege·attacks, | ||
| 000009f0:· | 000009f0:·0a77·6869·6368·2061·7474·656d·7074·2074··.which·attempt·t | ||
| 00000a00:· | 00000a00:·6f20·7375·6276·6572·7420·7468·6569·7220··o·subvert·their· | ||
| 00000a10:· | 00000a10:·6e6f·726d·616c·2072·6f6c·6520·6f66·2070··normal·role·of·p | ||
| 00000a20:· | 00000a20:·726f·7669·6469·6e67·2073·6f6d·6520·6e65··roviding·some·ne | ||
| 00000a30:·6 | 00000a30:·6365·7373·6172·7920·6275·740a·6c69·6d69··cessary·but.limi | ||
| 00000a40:· | 00000a40:·7465·6420·6361·7061·6269·6c69·7479·2e20··ted·capability.· | ||
| 00000a50:· | 00000a50:·4173·2073·7563·682c·206d·6f74·6976·6174··As·such,·motivat | ||
| 00000a60:·6 | 00000a60:·696f·6e20·6578·6973·7473·2074·6f20·6d6f··ion·exists·to·mo | ||
| 00000a70:·6 | 00000a70:·6e69·746f·7220·7468·6573·6520·7072·6f67··nitor·these·prog | ||
| 00000a80:· | 00000a80:·7261·6d73·2066·6f72·0a75·6e75·7375·616c··rams·for.unusual | ||
| 00000a90:· | 00000a90:·2061·6374·6976·6974·792e·0a20·2020·2020···activity..····· | ||
| 00000aa0:· | 00000aa0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | ||
| 00000ab0:· | 00000ab0:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | ||
| 00000ac0:· | 00000ac0:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000ad0:· | 00000ad0:·4155·2d31·3228·6329·3c62·722f·3e43·4d2d··AU-12(c)<br/>CM- | ||
| 00000ae0:· | 00000ae0:·3628·6129·3c2f·7464·3e0a·2020·2020·2020··6(a)</td>.······ | ||
| 00000af0:· | 00000af0:·3c74·643e·5265·636f·7264·2055·6e73·7563··<td>Record·Unsuc | ||
| 00000b00:· | 00000b00:·6365·7373·6675·6c20·4465·6c65·7465·2041··cessful·Delete·A | ||
| 00000b10:· | 00000b10:·7474·656d·7074·7320·746f·2046·696c·6573··ttempts·to·Files | ||
| 00000b20:· | 00000b20:·202d·2075·6e6c·696e·6b3c·2f74·643e·0a20···-·unlink</td>.· | ||
| 00000b30:· | 00000b30:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000b40:· | 00000b40:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000b50:· | 00000b50:·2020·200a·5468·6520·6175·6469·7420·7379·····.The·audit·sy | ||
| 00000b60:·7 | 00000b60:·7374·656d·2073·686f·756c·6420·636f·6c6c··stem·should·coll | ||
| 00000b70:·6 | 00000b70:·6563·7420·756e·7375·6363·6573·7366·756c··ect·unsuccessful | ||
| 00000b80:·6 | 00000b80:·2066·696c·6520·6465·6c65·7469·6f6e·0a61···file·deletion.a | ||
| 00000b90:·7 | 00000b90:·7474·656d·7074·7320·666f·7220·616c·6c20··ttempts·for·all· | ||
| 00000ba0:· | 00000ba0:·7573·6572·7320·616e·6420·726f·6f74·2e20··users·and·root.· | ||
| 00000bb0:· | 00000bb0:·4966·2074·6865·203c·7474·3e61·7564·6974··If·the·<tt>audit | ||
| 00000bc0:· | 00000bc0:·643c·2f74·743e·2064·6165·6d6f·6e20·6973··d</tt>·daemon·is | ||
| 00000bd0:· | 00000bd0:·2063·6f6e·6669·6775·7265·640a·746f·2075···configured.to·u | ||
| 00000be0:·207 | 00000be0:·7365·2074·6865·203c·7474·3e61·7567·656e··se·the·<tt>augen | ||
| Max diff block lines reached; 7019845/7286625 bytes (96.34%) of diff not shown. | |||
| Offset 75, 24 lines modified | Offset 75, 14 lines modified | ||
| 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify | 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify |
| 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual | 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual |
| 77 | page·for·futher·information. | 77 | page·for·futher·information. |
| 78 | ······</td> | 78 | ······</td> |
| 79 | ····</tr> | 79 | ····</tr> |
| 80 | ····<tr> | 80 | ····<tr> |
| 81 | ······<td>FAU_GEN.1</td> | 81 | ······<td>FAU_GEN.1</td> |
| 82 | ······<td>Ensure·the·audit-libs·package·as·a·part·of·audit·Subsystem·is·Installed</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········The·audit-libs·package·should·be·installed. | ||
| 85 | ······</td> | ||
| 86 | ······<td·xml:lang="en-US"> | ||
| 87 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | ||
| 88 | ······</td> | ||
| 89 | ····</tr> | ||
| 90 | ····<tr> | ||
| 91 | ······<td>FAU_GEN.1</td> | ||
| 92 | ······<td>Disable·SSH·Root·Login</td> | 82 | ······<td>Disable·SSH·Root·Login</td> |
| 93 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 94 | ········The·root·user·should·never·be·allowed·to·login·to·a | 84 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 95 | system·directly·over·a·network. | 85 | system·directly·over·a·network. |
| 96 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 86 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 106, 32 lines modified | Offset 96, 72 lines modified | ||
| 106 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 96 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 107 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 97 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 108 | direct·attack·attempts·on·root's·password. | 98 | direct·attack·attempts·on·root's·password. |
| 109 | ······</td> | 99 | ······</td> |
| 110 | ····</tr> | 100 | ····</tr> |
| 111 | ····<tr> | 101 | ····<tr> |
| 112 | ······<td>FAU_GEN.1</td> | 102 | ······<td>FAU_GEN.1</td> |
| 113 | ······<td> | 103 | ······<td>Configure·basic·parameters·of·Audit·system</td> |
| 114 | ······<td·xml:lang="en-US"> | 104 | ······<td·xml:lang="en-US"> |
| 105 | ········Perform·basic·configuration·of·Audit·system. | ||
| 106 | Make·sure·that·any·previously·defined·rules·are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in·cases·of·failure,·messages·are·configured·to·be·directed·to·system·log. | ||
| 115 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of | ||
| 116 | the·Linux·Auditing·System,·as·it·is·responsible·for·writing·audit·records·to | ||
| 117 | disk. | ||
| 118 | The·<code>auditd</code>·service·can·be·enabled·with·the·following·command: | ||
| 119 | 107 | The·following·rules·configure·audit·as·described·above: | |
| 108 | <pre>##·First·rule·-·delete·all | ||
| 109 | -D | ||
| 110 | ##·Increase·the·buffers·to·survive·stress·events. | ||
| 111 | ##·Make·this·bigger·for·busy·systems | ||
| 112 | -b·8192 | ||
| 113 | ##·This·determine·how·long·to·wait·in·burst·of·events | ||
| 114 | --backlog_wait_time·60000 | ||
| 115 | ##·Set·failure·mode·to·syslog | ||
| 116 | -f·1····</pre> | ||
| 117 | Load·new·Audit·rules·into·kernel·by·running: | ||
| 118 | <pre>augenrules·--load</pre> | ||
| 120 | ······</td> | 119 | ······</td> |
| 121 | ······<td·xml:lang="en-US"> | 120 | ······<td·xml:lang="en-US"> |
| 122 | ········Without·establishing·what·type·of·events·occurred,·it·would·be·difficult | ||
| 123 | to·establish,·correlate,·and·investigate·the·events·leading·up·to·an·outage·or·attack. | ||
| 124 | Ensuring·the·<tt>auditd</tt>·service·is·active·ensures·audit·records | ||
| 125 | generated·by·the·kernel·are·appropriately·recorded. | ||
| 126 | <br·/><br·/> | ||
| 127 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of | ||
| 128 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they | ||
| 129 | can· | 121 | ········Without·basic·configurations,·audit·may·not·perform·as·expected.·It·may·not·be·able·to·correctly·handle·events·under·stressful·conditions,·or·log·events·in·case·of·failure. |
| 122 | ······</td> | ||
| 123 | ····</tr> | ||
| 124 | ····<tr> | ||
| 125 | ······<td>FAU_GEN.1</td> | ||
| 126 | ······<td>Ensure·the·audit-libs·package·as·a·part·of·audit·Subsystem·is·Installed</td> | ||
| 127 | ······<td·xml:lang="en-US"> | ||
| 128 | ········The·audit-libs·package·should·be·installed. | ||
| 129 | ······</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | ||
| 132 | ······</td> | ||
| 133 | ····</tr> | ||
| 134 | ····<tr> | ||
| 135 | ······<td>FAU_GEN.1</td> | ||
| 136 | ······<td>Ensure·the·audit·Subsystem·is·Installed</td> | ||
| 137 | ······<td·xml:lang="en-US"> | ||
| 138 | ········The·audit·package·should·be·installed. | ||
| 139 | ······</td> | ||
| 140 | ······<td·xml:lang="en-US"> | ||
| 141 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>FAU_GEN.1</td> | ||
| 146 | ······<td>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</td> | ||
| 147 | ······<td·xml:lang="en-US"> | ||
| 148 | ········To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command | ||
| 149 | after·writing·<abbr·title="$var_auditd_freq"><tt>50</tt></abbr>·records,·set·<tt>freq</tt>·to·<tt><abbr·title="$var_auditd_freq"><tt>50</tt></abbr></tt> | ||
| 150 | in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 151 | ······</td> | ||
| 152 | ······<td·xml:lang="en-US"> | ||
| 153 | ········If·option·<tt>freq</tt>·isn't·set·to·<tt><sub·idref="var_auditd_freq"·/></tt>,·the·flush·to·disk | ||
| 154 | may·happen·after·higher·number·of·records,·increasing·the·danger | ||
| 155 | of·audit·loss. | ||
| 130 | ······</td> | 156 | ······</td> |
| 131 | ····</tr> | 157 | ····</tr> |
| 132 | ····<tr> | 158 | ····<tr> |
| 133 | ······<td>FAU_GEN.1</td> | 159 | ······<td>FAU_GEN.1</td> |
| 134 | ······<td>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</td> | 160 | ······<td>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</td> |
| 135 | ······<td·xml:lang="en-US"> | 161 | ······<td·xml:lang="en-US"> |
| 136 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, | 162 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, |
| Offset 146, 33 lines modified | Offset 176, 45 lines modified | ||
| 146 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | 176 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling |
| 147 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | 177 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument |
| 148 | ensures·it·is·set·for·every·process·during·boot. | 178 | ensures·it·is·set·for·every·process·during·boot. |
| 149 | ······</td> | 179 | ······</td> |
| 150 | ····</tr> | 180 | ····</tr> |
| 151 | ····<tr> | 181 | ····<tr> |
| 152 | ······<td>FAU_GEN.1</td> | 182 | ······<td>FAU_GEN.1</td> |
| 153 | ······<td> | 183 | ······<td>Include·Local·Events·in·Audit·Logs</td> |
| 154 | ······<td·xml:lang="en-US"> | 184 | ······<td·xml:lang="en-US"> |
| 155 | ········T | 185 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set |
| 186 | <tt>local_events</tt>·to·<tt>yes</tt>·in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 187 | This·is·the·default·setting. | ||
| 156 | ······</td> | 188 | ······</td> |
| 157 | ······<td·xml:lang="en-US"> | 189 | ······<td·xml:lang="en-US"> |
| 158 | ········ | 190 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from |
| 191 | network·will·be·aggregated. | ||
| 159 | ······</td> | 192 | ······</td> |
| 160 | ····</tr> | 193 | ····</tr> |
| Max diff block lines reached; 526600/532564 bytes (98.88%) of diff not shown. | |||
| Offset 173, 14 lines modified | Offset 173, 28 lines modified | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 175 | anti-spoofing·measure. | 175 | anti-spoofing·measure. |
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| 181 | ······<td·xml:lang="en-US"> | ||
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 183 | <pre> | ||
| 184 | $·sudo·yum·install·iptables</pre> | ||
| 185 | ······</td> | ||
| 186 | ······<td·xml:lang="en-US"> | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 189 | masquerading,·etc. | ||
| 190 | ······</td> | ||
| 191 | ····</tr> | ||
| 192 | ····<tr> | ||
| 193 | ······<td>Req-1.4.1</td> | ||
| 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 181 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 183 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 184 | ······</td> | 198 | ······</td> |
| 185 | ······<td·xml:lang="en-US"> | 199 | ······<td·xml:lang="en-US"> |
| 186 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a |
| Offset 188, 28 lines modified | Offset 202, 14 lines modified | ||
| 188 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, |
| 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 191 | enables·the·system·to·continue·servicing·valid·connection·requests. | 205 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 192 | ······</td> | 206 | ······</td> |
| 193 | ····</tr> | 207 | ····</tr> |
| 194 | ····<tr> | 208 | ····<tr> |
| 195 | ······<td>Req-1.4.1</td> | ||
| 196 | ······<td>Install·iptables·Package</td> | ||
| 197 | ······<td·xml:lang="en-US"> | ||
| 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 199 | <pre> | ||
| 200 | $·sudo·yum·install·iptables</pre> | ||
| 201 | ······</td> | ||
| 202 | ······<td·xml:lang="en-US"> | ||
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | masquerading,·etc. | ||
| 206 | ······</td> | ||
| 207 | ····</tr> | ||
| 208 | ····<tr> | ||
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 213 | transport·layer·protocol,·designed·to·support·the·idea·of | 213 | transport·layer·protocol,·designed·to·support·the·idea·of |
| 214 | message-oriented·communication,·with·several·streams·of·messages | 214 | message-oriented·communication,·with·several·streams·of·messages |
| 215 | within·one·connection. | 215 | within·one·connection. |
| Offset 246, 32 lines modified | Offset 246, 14 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| 252 | ······<td>Req-1.4.3</td> | 252 | ······<td>Req-1.4.3</td> |
| 253 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> | ||
| 254 | ······<td·xml:lang="en-US"> | ||
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> | ||
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> | ||
| 257 | ······</td> | ||
| 258 | ······<td·xml:lang="en-US"> | ||
| 259 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | ||
| 260 | forward·the·packet·along·a·different·path·than·configured·on·the·router,·which·can | ||
| 261 | be·used·to·bypass·network·security·measures.·This·requirement·applies·only·to·the | ||
| 262 | forwarding·of·source-routerd·traffic,·such·as·when·IPv6·forwarding·is·enabled·and | ||
| 263 | the·system·is·functioning·as·a·router. | ||
| 264 | Accepting·source-routed·packets·in·the·IPv6·protocol·has·few·legitimate | ||
| 265 | uses.·It·should·be·disabled·unless·it·is·absolutely·required. | ||
| 266 | ······</td> | ||
| 267 | ····</tr> | ||
| 268 | ····<tr> | ||
| 269 | ······<td>Req-1.4.3</td> | ||
| 270 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> | 253 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> |
| 271 | ······<td·xml:lang="en-US"> | 254 | ······<td·xml:lang="en-US"> |
| 272 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> | 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> |
| 273 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> | 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> |
| 274 | ······</td> | 257 | ······</td> |
| 275 | ······<td·xml:lang="en-US"> | 258 | ······<td·xml:lang="en-US"> |
| 276 | ········Ignoring·bogus·ICMP·error·responses·reduces | 259 | ········Ignoring·bogus·ICMP·error·responses·reduces |
| Offset 291, 26 lines modified | Offset 273, 28 lines modified | ||
| 291 | <br·/> | 273 | <br·/> |
| 292 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | 274 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast |
| 293 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | 275 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. |
| 294 | ······</td> | 276 | ······</td> |
| 295 | ····</tr> | 277 | ····</tr> |
| 296 | ····<tr> | 278 | ····<tr> |
| 297 | ······<td>Req-1.4.3</td> | 279 | ······<td>Req-1.4.3</td> |
| 298 | ······<td>Disable·Kernel·Parameter·for·Accepting· | 280 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> |
| 299 | ······<td·xml:lang="en-US"> | 281 | ······<td·xml:lang="en-US"> |
| 300 | ········To·set·the·runtime·status·of·the·<code>net.ipv | 282 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> |
| 301 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv | 283 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> |
| 302 | ······</td> | 284 | ······</td> |
| 303 | ······<td·xml:lang="en-US"> | 285 | ······<td·xml:lang="en-US"> |
| 304 | ········ICMP·redirect·messages·are·used·by·routers·to·inform·hosts·that·a·more | ||
| 305 | direct·route·exists·for·a·particular·destination.·These·messages·modify·the | ||
| 306 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect | ||
| 307 | message·could·result·in·a·man-in-the-middle·attack. | ||
| 308 | 286 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | |
| 287 | forward·the·packet·along·a·different·path·than·configured·on·the·router,·which·can | ||
| 288 | be·used·to·bypass·network·security·measures.·This·requirement·applies·only·to·the | ||
| 289 | forwarding·of·source-routerd·traffic,·such·as·when·IPv6·forwarding·is·enabled·and | ||
| 290 | the·system·is·functioning·as·a·router. | ||
| 291 | Accepting·source-routed·packets·in·the·IPv6·protocol·has·few·legitimate | ||
| 309 | be·disabled·unless·absolutely·required. | 292 | uses.·It·should·be·disabled·unless·it·is·absolutely·required. |
| 310 | ······</td> | 293 | ······</td> |
| 311 | ····</tr> | 294 | ····</tr> |
| 312 | ····<tr> | 295 | ····<tr> |
| 313 | ······<td>Req-1.4.3</td> | 296 | ······<td>Req-1.4.3</td> |
| 314 | ······<td>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</td> | 297 | ······<td>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</td> |
| 315 | ······<td·xml:lang="en-US"> | 298 | ······<td·xml:lang="en-US"> |
| 316 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.secure_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0</pre> | 299 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.secure_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0</pre> |
| Offset 334, 14 lines modified | Offset 318, 50 lines modified | ||
| 334 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were | 318 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were |
| 335 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for | 319 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for |
| 336 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small | 320 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small |
| Max diff block lines reached; 284010/291231 bytes (97.52%) of diff not shown. | |||
| Offset 129, 14 lines modified | Offset 129, 23 lines modified | ||
| 129 | ····················································································network·traffic | 129 | ····················································································network·traffic |
| 130 | ····················································································should·be·seen,·all | 130 | ····················································································should·be·seen,·all |
| 131 | ····················································································other·interfaces | 131 | ····················································································other·interfaces |
| 132 | ····················································································should·ignore | 132 | ····················································································should·ignore |
| 133 | ····················································································traffic·on·this | 133 | ····················································································traffic·on·this |
| 134 | ····················································································network·as·an·anti- | 134 | ····················································································network·as·an·anti- |
| 135 | ····················································································spoofing·measure. | 135 | ····················································································spoofing·measure. |
| 136 | ····················································································iptables·controls | ||
| 137 | ····················································································the·Linux·kernel | ||
| 138 | ····················································································network·packet | ||
| 139 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 140 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 141 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 142 | ····················································································set·up·firewalls | ||
| 143 | ····················································································and·IP | ||
| 144 | ····················································································masquerading,·etc. | ||
| 136 | ····················································································A·TCP·SYN·flood | 145 | ····················································································A·TCP·SYN·flood |
| 137 | ····················································································attack·can·cause·a | 146 | ····················································································attack·can·cause·a |
| 138 | ····················································································denial·of·service | 147 | ····················································································denial·of·service |
| 139 | ····················································································by·filling·a | 148 | ····················································································by·filling·a |
| 140 | ····················································································system's·TCP | 149 | ····················································································system's·TCP |
| 141 | ····················································································connection·table | 150 | ····················································································connection·table |
| 142 | ····················································································with·connections·in | 151 | ····················································································with·connections·in |
| Offset 155, 23 lines modified | Offset 164, 14 lines modified | ||
| 155 | ····················································································flood·condition·is | 164 | ····················································································flood·condition·is |
| 156 | ····················································································detected,·and | 165 | ····················································································detected,·and |
| 157 | ····················································································enables·the·system | 166 | ····················································································enables·the·system |
| 158 | ····················································································to·continue | 167 | ····················································································to·continue |
| 159 | ····················································································servicing·valid | 168 | ····················································································servicing·valid |
| 160 | ····················································································connection | 169 | ····················································································connection |
| 161 | ····················································································requests. | 170 | ····················································································requests. |
| 162 | ····················································································iptables·controls | ||
| 163 | ····················································································the·Linux·kernel | ||
| 164 | ····················································································network·packet | ||
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 168 | ····················································································set·up·firewalls | ||
| 169 | ····················································································and·IP | ||
| 170 | ····················································································masquerading,·etc. | ||
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 14 lines modified | Offset 187, 39 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. | 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. |
| 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ | 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ |
| 192 | ·····························dccp.conf: | 192 | ·····························dccp.conf: |
| 193 | ·····························blacklist·dccp | 193 | ·····························blacklist·dccp |
| 194 | ·····························To·set·the·runtime·status·of·the | ||
| 195 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 196 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 197 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 198 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 199 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 200 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 201 | ·····························sysctl.d: | ||
| 202 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 203 | ····················································································Responding·to | ||
| 204 | ····················································································broadcast·(ICMP) | ||
| 205 | ····················································································echoes·facilitates | ||
| 206 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 207 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 208 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 209 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 210 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 211 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 212 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 213 | ·····························sysctl.d:··············································or·multicast | ||
| 214 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 215 | ····················································································system·slightly | ||
| 216 | ····················································································more·difficult·to | ||
| 217 | ····················································································enumerate·on·the | ||
| 218 | ····················································································network. | ||
| 194 | ····················································································Source-routed | 219 | ····················································································Source-routed |
| 195 | ····················································································packets·allow·the | 220 | ····················································································packets·allow·the |
| 196 | ····················································································source·of·the | 221 | ····················································································source·of·the |
| 197 | ····················································································packet·to·suggest | 222 | ····················································································packet·to·suggest |
| 198 | ····················································································routers·forward·the | 223 | ····················································································routers·forward·the |
| 199 | ····················································································packet·along·a | 224 | ····················································································packet·along·a |
| 200 | ····················································································different·path·than | 225 | ····················································································different·path·than |
| Offset 218, 63 lines modified | Offset 243, 14 lines modified | ||
| 218 | ····················································································packets·in·the·IPv6 | 243 | ····················································································packets·in·the·IPv6 |
| 219 | ····················································································protocol·has·few | 244 | ····················································································protocol·has·few |
| 220 | ····················································································legitimate·uses.·It | 245 | ····················································································legitimate·uses.·It |
| 221 | ····················································································should·be·disabled | 246 | ····················································································should·be·disabled |
| 222 | ····················································································unless·it·is | 247 | ····················································································unless·it·is |
| 223 | ····················································································absolutely | 248 | ····················································································absolutely |
| 224 | ····················································································required. | 249 | ····················································································required. |
| 225 | ·····························To·set·the·runtime·status·of·the | ||
| 226 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 227 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 228 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 229 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 230 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 231 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 232 | ·····························sysctl.d: | ||
| 233 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 234 | ····················································································Responding·to | ||
| 235 | ····················································································broadcast·(ICMP) | ||
| 236 | ····················································································echoes·facilitates | ||
| 237 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 238 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 239 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 240 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 241 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 242 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 243 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 244 | ·····························sysctl.d:··············································or·multicast | ||
| 245 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 246 | ····················································································system·slightly | ||
| 247 | ····················································································more·difficult·to | ||
| 248 | ····················································································enumerate·on·the | ||
| 249 | ····················································································network. | ||
| 250 | ····················································································ICMP·redirect | ||
| 251 | ····················································································messages·are·used | ||
| 252 | ····················································································by·routers·to | ||
| 253 | ····················································································inform·hosts·that·a | ||
| 254 | ····················································································more·direct·route | ||
| 255 | ····················································································exists·for·a | ||
| 256 | ····················································································particular | ||
| Max diff block lines reached; 462671/476678 bytes (97.06%) of diff not shown. | |||
| Offset 184, 159 lines modified | Offset 184, 159 lines modified | ||
| 00000b70:·6162·6c65·2065·6974·6865·7220·4578·6563··able·either·Exec | 00000b70:·6162·6c65·2065·6974·6865·7220·4578·6563··able·either·Exec | ||
| 00000b80:·7574·6520·4469·7361·626c·6520·2858·4429··ute·Disable·(XD) | 00000b80:·7574·6520·4469·7361·626c·6520·2858·4429··ute·Disable·(XD) | ||
| 00000b90:·206f·7220·4e6f·2045·7865·6375·7465·2028···or·No·Execute·( | 00000b90:·206f·7220·4e6f·2045·7865·6375·7465·2028···or·No·Execute·( | ||
| 00000ba0:·4e58·2920·7375·7070·6f72·742e·0a20·2020··NX)·support..··· | 00000ba0:·4e58·2920·7375·7070·6f72·742e·0a20·2020··NX)·support..··· | ||
| 00000bb0:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00000bb0:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00000bc0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00000bc0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00000bd0:·2020·3c74·643e·5231·3c2f·7464·3e0a·2020····<td>R1</td>.·· | 00000bd0:·2020·3c74·643e·5231·3c2f·7464·3e0a·2020····<td>R1</td>.·· | ||
| 00000be0:·2020·2020·3c74·643e·496e·7374·616c·6c20······<td>Install· | |||
| 00000bf0:·7468·6520·6472·6163·7574·2d66·6970·732d··the·dracut-fips- | |||
| 00000 | 00000be0:·2020·2020·3c74·643e·5072·6566·6572·2074······<td>Prefer·t | ||
| 00000bf0:·6f20·7573·6520·6120·3634·2d62·6974·204f··o·use·a·64-bit·O | |||
| 00000c00:·7065·7261·7469·6e67·2053·7973·7465·6d20··perating·System· | |||
| 00000c10:·7768·656e·2073·7570·706f·7274·6564·3c2f··when·supported</ | |||
| 00000c | 00000c20:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | ||
| 00000c30:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00000c40:·2020·2020·2020·2020·5072·6566·6572·2069··········Prefer·i | |||
| 00000c50:·6e73·7461·6c6c·6174·696f·6e20·6f66·2036··nstallation·of·6 | |||
| 00000c60:·342d·6269·7420·6f70·6572·6174·696e·6720··4-bit·operating· | |||
| 00000c70:·7379·7374·656d·7320·7768·656e·2074·6865··systems·when·the | |||
| 00000c80:·2043·5055·2073·7570·706f·7274·7320·6974···CPU·supports·it | |||
| 00000c20:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00000c30:·2020·2020·2020·2054·6f20·656e·6162·6c65·········To·enable | |||
| 00000c40:·2046·4950·5320·6f6e·2073·7973·7465·6d20···FIPS·on·system· | |||
| 00000c50:·7468·6174·2073·7570·706f·7274·2074·6865··that·support·the | |||
| 00000c60:·2041·6476·616e·6365·6420·456e·6372·7970···Advanced·Encryp | |||
| 00000c70:·7469·6f6e·2053·7461·6e64·6172·6420·2841··tion·Standard·(A | |||
| 00000c80:·4553·2920·6f72·204e·6577·0a49·6e73·7472··ES)·or·New.Instr | |||
| 00000c90:·7563·7469·6f6e·7320·2841·4553·2d4e·4929··uctions·(AES-NI) | |||
| 00000ca0:·2065·6e67·696e·652c·2074·6865·2073·7973···engine,·the·sys | |||
| 00000cb0:·7465·6d20·7265·7175·6972·6573·2074·6861··tem·requires·tha | |||
| 00000cc0:·7420·7468·6520·3c74·743e·6472·6163·7574··t·the·<tt>dracut | |||
| 00000cd0:·2d66·6970·732d·6165·736e·693c·2f74·743e··-fips-aesni</tt> | |||
| 00000ce0:·0a70·6163·6b61·6765·2062·6520·696e·7374··.package·be·inst | |||
| 00000cf0:·616c·6c65·642e·0a54·6865·203c·636f·6465··alled..The·<code | |||
| 00000d00:·3e64·7261·6375·742d·6669·7073·2d61·6573··>dracut-fips-aes | |||
| 00000d10:·6e69·3c2f·636f·6465·3e20·7061·636b·6167··ni</code>·packag | |||
| 00000d20:·6520·6361·6e20·6265·2069·6e73·7461·6c6c··e·can·be·install | |||
| 00000d30:·6564·2077·6974·6820·7468·6520·666f·6c6c··ed·with·the·foll | |||
| 00000d40:·6f77·696e·6720·636f·6d6d·616e·643a·0a3c··owing·command:.< | |||
| 00000d50:·7072·653e·0a24·2073·7564·6f20·7975·6d20··pre>.$·sudo·yum· | |||
| 00000d60:·696e·7374·616c·6c20·6472·6163·7574·2d66··install·dracut-f | |||
| 00000d70:·6970·732d·6165·736e·693c·2f70·7265·3e0a··ips-aesni</pre>. | |||
| 00000 | 00000c90:·2e0a·2020·2020·2020·3c2f·7464·3e0a·2020··..······</td>.·· | ||
| 00000 | 00000ca0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 00000 | 00000cb0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| 00000cc0:·2020·5573·6520·6f66·2061·2036·342d·6269····Use·of·a·64-bi | |||
| 00000cd0:·7420·6f70·6572·6174·696e·6720·7379·7374··t·operating·syst | |||
| 00000ce0:·656d·206f·6666·6572·7320·6120·6665·7720··em·offers·a·few· | |||
| 00000cf0:·6164·7661·6e74·6167·6573·2c20·6c69·6b65··advantages,·like | |||
| 00000d00:·2061·206c·6172·6765·7220·6164·6472·6573···a·larger·addres | |||
| 00000d10:·7320·7370·6163·6520·7261·6e67·6520·666f··s·space·range·fo | |||
| 00000d20:·720a·4164·6472·6573·7320·5370·6163·6520··r.Address·Space· | |||
| 00000d30:·4c61·796f·7574·2052·616e·646f·6d69·7a61··Layout·Randomiza | |||
| 00000d40:·7469·6f6e·2028·4153·4c52·2920·616e·6420··tion·(ASLR)·and· | |||
| 00000d50:·7379·7374·656d·6174·6963·2070·7265·7365··systematic·prese | |||
| 00000d60:·6e63·6520·6f66·204e·6f20·6558·6563·7574··nce·of·No·eXecut | |||
| 00000d70:·6520·616e·6420·4578·6563·7574·6520·4469··e·and·Execute·Di | |||
| 00000d80:·7361·626c·6520·284e·582f·5844·2920·7072··sable·(NX/XD)·pr | |||
| 00000d90:·6f74·6563·7469·6f6e·2062·6974·732e·0a20··otection·bits..· | |||
| 00000da0:·2020·2020·203c·2f74·643e·0a20·2020·203c·······</td>.····< | |||
| 00000db0:·2f74·723e·0a20·2020·203c·7472·3e0a·2020··/tr>.····<tr>.·· | |||
| 00000dc0:·2020·2020·3c74·643e·5231·3c2f·7464·3e0a······<td>R1</td>. | |||
| 00000dd0:·2020·2020·2020·3c74·643e·496e·7374·616c········<td>Instal | |||
| 00000de0:·6c20·7468·6520·6472·6163·7574·2d66·6970··l·the·dracut-fip | |||
| 00000df0:·732d·6165·736e·6920·5061·636b·6167·653c··s-aesni·Package< | |||
| 00000e00:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | |||
| 00000e10:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | |||
| 00000e20:·0a20·2020·2020·2020·2054·6f20·656e·6162··.········To·enab | |||
| 00000e30:·6c65·2046·4950·5320·6f6e·2073·7973·7465··le·FIPS·on·syste | |||
| 00000e40:·6d20·7468·6174·2073·7570·706f·7274·2074··m·that·support·t | |||
| 00000e50:·6865·2041·6476·616e·6365·6420·456e·6372··he·Advanced·Encr | |||
| 00000e60:·7970·7469·6f6e·2053·7461·6e64·6172·6420··yption·Standard· | |||
| 00000e70:·2841·4553·2920·6f72·204e·6577·0a49·6e73··(AES)·or·New.Ins | |||
| 00000e80:·7472·7563·7469·6f6e·7320·2841·4553·2d4e··tructions·(AES-N | |||
| 00000e90:·4929·2065·6e67·696e·652c·2074·6865·2073··I)·engine,·the·s | |||
| 00000ea0:·7973·7465·6d20·7265·7175·6972·6573·2074··ystem·requires·t | |||
| 00000eb0:·6861·7420·7468·6520·3c74·743e·6472·6163··hat·the·<tt>drac | |||
| 00000ec0:·7574·2d66·6970·732d·6165·736e·693c·2f74··ut-fips-aesni</t | |||
| 00000ed0:·743e·0a70·6163·6b61·6765·2062·6520·696e··t>.package·be·in | |||
| 00000ee0:·7374·616c·6c65·642e·0a54·6865·203c·636f··stalled..The·<co | |||
| 00000ef0:·6465·3e64·7261·6375·742d·6669·7073·2d61··de>dracut-fips-a | |||
| 00000f00:·6573·6e69·3c2f·636f·6465·3e20·7061·636b··esni</code>·pack | |||
| 00000f10:·6167·6520·6361·6e20·6265·2069·6e73·7461··age·can·be·insta | |||
| 00000f20:·6c6c·6564·2077·6974·6820·7468·6520·666f··lled·with·the·fo | |||
| 00000f30:·6c6c·6f77·696e·6720·636f·6d6d·616e·643a··llowing·command: | |||
| 00000f40:·0a3c·7072·653e·0a24·2073·7564·6f20·7975··.<pre>.$·sudo·yu | |||
| 00000f50:·6d20·696e·7374·616c·6c20·6472·6163·7574··m·install·dracut | |||
| 00000f60:·2d66·6970·732d·6165·736e·693c·2f70·7265··-fips-aesni</pre | |||
| 00000f70:·3e0a·2020·2020·2020·3c2f·7464·3e0a·2020··>.······</td>.·· | |||
| 00000f80:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00000f90:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 00000 | 00000fa0:·2020·5573·6520·6f66·2077·6561·6b20·6f72····Use·of·weak·or | ||
| 00000 | 00000fb0:·2075·6e74·6573·7465·6420·656e·6372·7970···untested·encryp | ||
| 00000 | 00000fc0:·7469·6f6e·2061·6c67·6f72·6974·686d·7320··tion·algorithms· | ||
| 00000 | 00000fd0:·756e·6465·726d·696e·6573·2074·6865·2070··undermines·the·p | ||
| 00000 | 00000fe0:·7572·706f·7365·7320·6f66·2075·7469·6c69··urposes·of·utili | ||
| 00000 | 00000ff0:·7a69·6e67·2065·6e63·7279·7074·696f·6e20··zing·encryption· | ||
| 0000 | 00001000:·746f·0a70·726f·7465·6374·2064·6174·612e··to.protect·data. | ||
| 00000 | 00001010:·2054·6865·206f·7065·7261·7469·6e67·2073···The·operating·s | ||
| 0000 | 00001020:·7973·7465·6d20·6d75·7374·2069·6d70·6c65··ystem·must·imple | ||
| 0000 | 00001030:·6d65·6e74·2063·7279·7074·6f67·7261·7068··ment·cryptograph | ||
| 0000 | 00001040:·6963·206d·6f64·756c·6573·2061·6468·6572··ic·modules·adher | ||
| 00000 | 00001050:·696e·6720·746f·2074·6865·2068·6967·6865··ing·to·the·highe | ||
| 00000 | 00001060:·720a·7374·616e·6461·7264·7320·6170·7072··r.standards·appr | ||
| 0000 | 00001070:·6f76·6564·2062·7920·7468·6520·6665·6465··oved·by·the·fede | ||
| 0000 | 00001080:·7261·6c20·676f·7665·726e·6d65·6e74·2073··ral·government·s | ||
| 0000 | 00001090:·696e·6365·2074·6869·7320·7072·6f76·6964··ince·this·provid | ||
| 0000 | 000010a0:·6573·2061·7373·7572·616e·6365·2074·6865··es·assurance·the | ||
| 0000 | 000010b0:·7920·6861·7665·2062·6565·6e20·7465·7374··y·have·been·test | ||
| 0000 | 000010c0:·6564·0a61·6e64·2076·616c·6964·6174·6564··ed.and·validated | ||
| 00000 | 000010d0:·2e0a·2020·2020·2020·3c2f·7464·3e0a·2020··..······</td>.·· | ||
| 00000e | 000010e0:·2020·3c2f·7472·3e0a·2020·2020·3c74·723e····</tr>.····<tr> | ||
| 00000f00 | 000010f0:·0a20·2020·2020·203c·7464·3e52·313c·2f74··.······<td>R1</t | ||
| 0000 | 00001100:·643e·0a20·2020·2020·203c·7464·3e45·6e73··d>.······<td>Ens | ||
| 0000 | 00001110:·7572·6520·534d·4150·2069·7320·6e6f·7420··ure·SMAP·is·not· | ||
| 0000 | 00001120:·6469·7361·626c·6564·2064·7572·696e·6720··disabled·during· | ||
| 00000f40:·6f74·3c2f·7464·3e0a·2020·2020·2020·3c74··ot</td>.······<t | |||
| 00000f50:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | |||
| 00000f60:·5322·3e0a·2020·2020·2020·2020·5468·6520··S">.········The· | |||
| 00000f70:·534d·4150·2069·7320·7573·6564·2074·6f20··SMAP·is·used·to· | |||
| 00000f80:·7072·6576·656e·7420·7468·6520·7375·7065··prevent·the·supe | |||
| 00000f90:·7276·6973·6f72·206d·6f64·6520·6672·6f6d··rvisor·mode·from | |||
| 00000fa0:·2075·6e69·6e74·656e·7469·6f6e·616c·6c79···unintentionally | |||
| 00000fb0:·2072·6561·6469·6e67·2f77·7269·7469·6e67···reading/writing | |||
| 00000fc0:·2069·6e74·6f0a·6d65·6d6f·7279·2070·6167···into.memory·pag | |||
| 00000fd0:·6573·2069·6e20·7468·6520·7573·6572·2073··es·in·the·user·s | |||
| 00000fe0:·7061·6365·2c20·6974·2069·7320·656e·6162··pace,·it·is·enab | |||
| Max diff block lines reached; 2955168/2974926 bytes (99.34%) of diff not shown. | |||
| Offset 30, 14 lines modified | Offset 30, 21 lines modified | ||
| 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 31 | ······························installed·with·the·following·command:········(NX)·support. | 31 | ······························installed·with·the·following·command:········(NX)·support. |
| 32 | ······························$·sudo·yum·install·kernel-PAE | 32 | ······························$·sudo·yum·install·kernel-PAE |
| 33 | ······························The·installation·process·should·also·have | 33 | ······························The·installation·process·should·also·have |
| 34 | ······························configured·the·bootloader·to·load·the·new | 34 | ······························configured·the·bootloader·to·load·the·new |
| 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 36 | ······························modify·/etc/default/grub·if·necessary. | 36 | ······························modify·/etc/default/grub·if·necessary. |
| 37 | ···········································································Use·of·a·64-bit·operating·system | ||
| 38 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 39 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 40 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 41 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 42 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 43 | ···········································································bits. | ||
| 37 | ···········································································Use·of·weak·or·untested·encryption | 44 | ···········································································Use·of·weak·or·untested·encryption |
| 38 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of |
| 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| Offset 55, 38 lines modified | Offset 62, 31 lines modified | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | 63 | ······························within·/etc/default/grub·doesn't·contain·the |
| 57 | ······························argument·nosmap.·Run·the·following·command | 64 | ······························argument·nosmap.·Run·the·following·command |
| 58 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 59 | ······························kernels: | 66 | ······························kernels: |
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 61 | ······························args="nosmap" | 68 | ······························args="nosmap" |
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loade | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5·· | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| 76 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. | 76 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. |
| 77 | ······························When·prompted,·enter·the·password·that·was | 77 | ······························When·prompted,·enter·the·password·that·was |
| 78 | ······························selected. | 78 | ······························selected. |
| 79 | ······························The·grub2·boot·loader·should·have·a | 79 | ······························The·grub2·boot·loader·should·have·a |
| 80 | ······························superuser·account·and·password·protection | 80 | ······························superuser·account·and·password·protection |
| 81 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 81 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 82 | ···········································································configuration·ensures·users·with | 82 | ···········································································configuration·ensures·users·with |
| 83 | ····Set· | 83 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 84 | R5·· | 84 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 85 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 85 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| 86 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. | 86 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. |
| 87 | ······························When·prompted,·enter·the·password·that·was | 87 | ······························When·prompted,·enter·the·password·that·was |
| 88 | ······························selected. | 88 | ······························selected. |
| 89 | ······························On·x86·architecture·supporting·VT-d,·the | 89 | ······························On·x86·architecture·supporting·VT-d,·the |
| 90 | ······························IOMMU·manages·the·access·control·policy | 90 | ······························IOMMU·manages·the·access·control·policy |
| Offset 99, 27 lines modified | Offset 99, 14 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·Kernel·page-table·isolation,·add | ||
| 107 | ······························the·argument·pti=on·to·the·default·GRUB·2 | ||
| 108 | ······························command·line·for·the·Linux·operating·system. | ||
| 109 | ······························To·ensure·that·pti=on·is·added·as·a·kernel···Kernel·page-table·isolation·is·a | ||
| 110 | ······························command·line·argument·to·newly·installed·····kernel·feature·that·mitigates·the | ||
| 111 | ····Enable·Kernel·Page-Table··kernels,·add·pti=on·to·the·default·Grub2·····Meltdown·security·vulnerability·and | ||
| 112 | R8··Isolation·(KPTI)··········command·line·for·Linux·operating·systems.····hardens·the·kernel·against·attempts·to | ||
| 113 | ······························Modify·the·line·within·/etc/default/grub·as··bypass·kernel·address·space·layout | ||
| 114 | ······························shown·below:·································randomization·(KASLR). | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·pti=on·..." | ||
| 116 | ······························Run·the·following·command·to·update·command | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·--args="pti=on" | ||
| 119 | ······························The·TPM·security·chip·that·is·available·in | 106 | ······························The·TPM·security·chip·that·is·available·in |
| 120 | ······························most·modern·systems·has·a·hardware·RNG.·It | 107 | ······························most·modern·systems·has·a·hardware·RNG.·It |
| 121 | ······························is·also·used·to·feed·the·entropy·pool,·but | 108 | ······························is·also·used·to·feed·the·entropy·pool,·but |
| 122 | ······························generally·not·credited·entropy.·Use | 109 | ······························generally·not·credited·entropy.·Use |
| 123 | ······························rng_core.default_quality·in·the·kernel | 110 | ······························rng_core.default_quality·in·the·kernel |
| 124 | ······························command·line·to·set·the·trust·level·on·the | 111 | ······························command·line·to·set·the·trust·level·on·the |
| 125 | ······························hardware·generators.·The·trust·level·defines | 112 | ······························hardware·generators.·The·trust·level·defines |
| Offset 146, 89 lines modified | Offset 133, 14 lines modified | ||
| 146 | ······························default/grub·as·shown·below: | 133 | ······························default/grub·as·shown·below: |
| 147 | ······························GRUB_CMDLINE_LINUX="... | 134 | ······························GRUB_CMDLINE_LINUX="... |
| 148 | ······························rng_core.default_quality=500·..." | 135 | ······························rng_core.default_quality=500·..." |
| 149 | ······························Run·the·following·command·to·update·command | 136 | ······························Run·the·following·command·to·update·command |
| 150 | ······························line·for·already·installed·kernels: | 137 | ······························line·for·already·installed·kernels: |
| 151 | ······························#·grubby·--update-kernel=ALL·-- | 138 | ······························#·grubby·--update-kernel=ALL·-- |
| 152 | ······························args="rng_core.default_quality=500" | 139 | ······························args="rng_core.default_quality=500" |
| 153 | ······························A·Machine·Check·Exception·is·an·error | ||
| 154 | ······························generated·by·the·CPU·itdetects·an·error·in | ||
| 155 | ······························itself,·memory·or·I/O·devices.·These·errors | ||
| 156 | ······························may·be·corrected·and·generate·a·check·log | ||
| 157 | ······························entry,·if·an·error·cannot·be·corrected·the | ||
| 158 | ······························kernel·may·panic·or·SIGBUS.·To·force·the | ||
| 159 | ······························kernel·to·panic·on·any·uncorrected·error | ||
| 160 | ······························reported·by·Machine·Check·set·the·MCE | ||
| 161 | ······························tolerance·to·zero·by·adding·mce=0·to·the·····Allowing·uncorrected·errors·to·result | ||
| 162 | R8··Force·kernel·panic·on·····default·GRUB·2·command·line·for·the·Linux····on·a·SIGBUS·may·allow·an·attacker·to | ||
| 163 | ····uncorrected·MCEs··········operating·system.·To·ensure·that·mce=0·is····continue·trying·to·exploit·a | ||
| 164 | ······························added·as·a·kernel·command·line·argument·to···vulnerability·such·as·Rowhammer. | ||
| 165 | ······························newly·installed·kernels,·add·mce=0·to·the | ||
| 166 | ······························default·Grub2·command·line·for·Linux | ||
| 167 | ······························operating·systems.·Modify·the·line·within·/ | ||
| 168 | ······························etc/default/grub·as·shown·below: | ||
| 169 | ······························GRUB_CMDLINE_LINUX="...·mce=0·..." | ||
| 170 | ······························Run·the·following·command·to·update·command | ||
| 171 | ······························line·for·already·installed·kernels: | ||
| 172 | ······························#·grubby·--update-kernel=ALL·--args="mce=0" | ||
| 173 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 174 | ······························vulnerability·which·allows·unprivileged | ||
| 175 | ······························speculative·access·to·data·which·is | ||
| 176 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 177 | ······························page·table·entry·isn't·present.·Select·the | ||
| 178 | ······························appropriate·mitigation·by·adding·the | ||
| 179 | ······························argument·l1tf=flush·to·the·default·GRUB·2 | ||
| 180 | ······························command·line·for·the·Linux·operating·system. | ||
| 181 | ······························To·ensure·that·l1tf=flush·is·added·as·a······The·L1TF·vulnerability·allows·an | ||
| 182 | ······························kernel·command·line·argument·to·newly········attacker·to·bypass·memory·access | ||
| 183 | ····Configure·L1·Terminal·····installed·kernels,·add·l1tf=flush·to·the·····security·controls·imposed·by·the | ||
| Max diff block lines reached; 653423/668761 bytes (97.71%) of diff not shown. | |||
| Offset 40, 57 lines modified | Offset 40, 14 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td>Disable·SSH·Root·Login</td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········The·root·user·should·never·be·allowed·to·login·to·a | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 94 | system·directly·over·a·network. | 51 | system·directly·over·a·network. |
| 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 104, 72 lines modified | Offset 61, 14 lines modified | ||
| 104 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 107 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 108 | ······</td> | 65 | ······</td> |
| 109 | ····</tr> | 66 | ····</tr> |
| 110 | ····<tr> | 67 | ····<tr> |
| 111 | ······<td>3.1.1</td> | ||
| 112 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 113 | ······<td·xml:lang="en-US"> | ||
| 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 119 | <pre>[daemon] | ||
| 120 | AutomaticLoginEnable=false</pre> | ||
| 121 | ······</td> | ||
| 122 | ······<td·xml:lang="en-US"> | ||
| 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 124 | system·security. | ||
| 125 | ······</td> | ||
| 126 | ····</tr> | ||
| 127 | ····<tr> | ||
| 128 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 147 | ······<td>Verify·Only·Root·Has·UID·0</td> | ||
| 148 | ······<td·xml:lang="en-US"> | ||
| 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 151 | their·UID·changed. | ||
| 152 | <br·/> | ||
| 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 154 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 155 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 156 | assigned. | ||
| 157 | ······</td> | ||
| 158 | ······<td·xml:lang="en-US"> | ||
| 159 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 160 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 161 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 162 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 163 | access·to·root·privileges·in·an·accountable·manner. | ||
| 164 | ······</td> | ||
| 165 | ····</tr> | ||
| 166 | ····<tr> | ||
| 167 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 168 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> | 69 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> |
| 169 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 170 | ········Disallow·SSH·login·with·empty·passwords. | 71 | ········Disallow·SSH·login·with·empty·passwords. |
| Max diff block lines reached; 462850/468127 bytes (98.87%) of diff not shown. | |||
| Offset 4165, 15 lines modified | Offset 4165, 15 lines modified | ||
| 4165 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4165 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4166 | ··</td> | 4166 | ··</td> |
| 4167 | ··<td·xml:lang="en-US"> | 4167 | ··<td·xml:lang="en-US"> |
| 4168 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4168 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4169 | time-based·limit,·effects·of·potential·attacks·against | 4169 | time-based·limit,·effects·of·potential·attacks·against |
| 4170 | encryption·keys·are·limited. | 4170 | encryption·keys·are·limited. |
| 4171 | ··</td> | 4171 | ··</td> |
| 4172 | ··<td>var_rekey_limit_ | 4172 | ··<td>var_rekey_limit_size=1G<br/>var_rekey_limit_time=1hour</td> |
| 4173 | </tr> | 4173 | </tr> |
| 4174 | <tr> | 4174 | <tr> |
| 4175 | ··<td></td> | 4175 | ··<td></td> |
| 4176 | ··<td>N/A</td> | 4176 | ··<td>N/A</td> |
| 4177 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4177 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4178 | ··<td·xml:lang="en-US"> | 4178 | ··<td·xml:lang="en-US"> |
| 4179 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4179 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3361, 16 lines modified | Offset 3361, 16 lines modified | ||
| 3361 | ··················································································································generator·used·by | 3361 | ··················································································································generator·used·by |
| 3362 | ··················································································································SSH·would·be·known | 3362 | ··················································································································SSH·would·be·known |
| 3363 | ··················································································································to·potential | 3363 | ··················································································································to·potential |
| 3364 | ··················································································································attackers. | 3364 | ··················································································································attackers. |
| 3365 | ··················································································································By·decreasing·the | 3365 | ··················································································································By·decreasing·the |
| 3366 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3366 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3367 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3367 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3368 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3368 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_size=1G |
| 3369 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3369 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_time=1hour |
| 3370 | ·························RekeyLimit·1G·1hour······································································potential·attacks | 3370 | ·························RekeyLimit·1G·1hour······································································potential·attacks |
| 3371 | ··················································································································against·encryption | 3371 | ··················································································································against·encryption |
| 3372 | ··················································································································keys·are·limited. | 3372 | ··················································································································keys·are·limited. |
| 3373 | ··················································································································SSH·implementation | 3373 | ··················································································································SSH·implementation |
| 3374 | ··················································································································in·Oracle·Linux·8 | 3374 | ··················································································································in·Oracle·Linux·8 |
| 3375 | ··················································································································uses·the·openssl | 3375 | ··················································································································uses·the·openssl |
| 3376 | ··················································································································library,·which | 3376 | ··················································································································library,·which |
| Offset 24360, 17 lines modified | Offset 24360, 17 lines modified | ||
| 0005f270:·0a74·696d·652d·6261·7365·6420·6c69·6d69··.time-based·limi | 0005f270:·0a74·696d·652d·6261·7365·6420·6c69·6d69··.time-based·limi | ||
| 0005f280:·742c·2065·6666·6563·7473·206f·6620·706f··t,·effects·of·po | 0005f280:·742c·2065·6666·6563·7473·206f·6620·706f··t,·effects·of·po | ||
| 0005f290:·7465·6e74·6961·6c20·6174·7461·636b·7320··tential·attacks· | 0005f290:·7465·6e74·6961·6c20·6174·7461·636b·7320··tential·attacks· | ||
| 0005f2a0:·6167·6169·6e73·740a·656e·6372·7970·7469··against.encrypti | 0005f2a0:·6167·6169·6e73·740a·656e·6372·7970·7469··against.encrypti | ||
| 0005f2b0:·6f6e·206b·6579·7320·6172·6520·6c69·6d69··on·keys·are·limi | 0005f2b0:·6f6e·206b·6579·7320·6172·6520·6c69·6d69··on·keys·are·limi | ||
| 0005f2c0:·7465·642e·0a20·203c·2f74·643e·0a20·203c··ted..··</td>.··< | 0005f2c0:·7465·642e·0a20·203c·2f74·643e·0a20·203c··ted..··</td>.··< | ||
| 0005f2d0:·7464·3e76·6172·5f72·656b·6579·5f6c·696d··td>var_rekey_lim | 0005f2d0:·7464·3e76·6172·5f72·656b·6579·5f6c·696d··td>var_rekey_lim | ||
| 0005f2e0:·6974·5f73·697a·653d·3147·3c62·722f·3e76··it_size=1G<br/>v | |||
| 0005f2 | 0005f2e0:·6974·5f74·696d·653d·3168·6f75·723c·6272··it_time=1hour<br | ||
| 0005f2f0:·2f3e·7661·725f·7265·6b65·795f·6c69·6d69··/>var_rekey_limi | |||
| 0005f300:· | 0005f300:·745f·7369·7a65·3d31·473c·2f74·643e·0a3c··t_size=1G</td>.< | ||
| 0005f310:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | 0005f310:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | ||
| 0005f320:·3c2f·7464·3e0a·2020·3c74·643e·4e2f·413c··</td>.··<td>N/A< | 0005f320:·3c2f·7464·3e0a·2020·3c74·643e·4e2f·413c··</td>.··<td>N/A< | ||
| 0005f330:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | 0005f330:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | ||
| 0005f340:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | 0005f340:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | ||
| 0005f350:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | 0005f350:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | ||
| 0005f360:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | 0005f360:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | ||
| 0005f370:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T | 0005f370:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T |
| Offset 7762, 16 lines modified | Offset 7762, 16 lines modified | ||
| 7762 | ·································private·key.··········································system·where·the | 7762 | ·································private·key.··········································system·where·the |
| 7763 | ·······················································································associated·public | 7763 | ·······················································································associated·public |
| 7764 | ·······················································································key·has·been | 7764 | ·······················································································key·has·been |
| 7765 | ·······················································································installed. | 7765 | ·······················································································installed. |
| 7766 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7766 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7767 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7767 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7768 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7768 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7769 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7769 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_time=1hour |
| 7770 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7770 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_size=1G |
| 7771 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7771 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7772 | ·································RekeyLimit·1G·1hour···································against·encryption | 7772 | ·································RekeyLimit·1G·1hour···································against·encryption |
| 7773 | ·······················································································keys·are·limited. | 7773 | ·······················································································keys·are·limited. |
| 7774 | ·······················································································SSH·implementation | 7774 | ·······················································································SSH·implementation |
| 7775 | ·······················································································in·Oracle·Linux·8 | 7775 | ·······················································································in·Oracle·Linux·8 |
| 7776 | ·······················································································uses·the·openssl | 7776 | ·······················································································uses·the·openssl |
| 7777 | ·······················································································library,·which | 7777 | ·······················································································library,·which |
| Offset 66, 14967 lines modified | Offset 66, 14967 lines modified | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | Diff chunk too large, falling back to line-by-line diff (2707 lines added, 2707 lines removed) | |
| 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:·2020·2020·2020·3c74·643e· | 00000480:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000490:·20 | 00000490:·2041·6e79·2041·7474·656d·7074·7320·746f···Any·Attempts·to | ||
| 000004a0:·20 | 000004a0:·2052·756e·2063·6863·6f6e·3c2f·7464·3e0a···Run·chcon</td>. | ||
| 000004b0:· | 000004b0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000004c0:·6 | 000004c0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000004d0:·20 | 000004d0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| 000004e0:· | 000004e0:·2c20·7468·6520·6175·6469·7420·7379·7374··,·the·audit·syst | ||
| 000004f0:·6 | 000004f0:·656d·2073·686f·756c·6420·636f·6c6c·6563··em·should·collec | ||
| 00000500:· | 00000500:·7420·616e·7920·6578·6563·7574·696f·6e20··t·any·execution· | ||
| 00000510:·7 | 00000510:·6174·7465·6d70·740a·6f66·2074·6865·203c··attempt.of·the·< | ||
| 00000520:·7 | 00000520:·7474·3e63·6863·6f6e·3c2f·7474·3e20·636f··tt>chcon</tt>·co | ||
| 00000530:·6 | 00000530:·6d6d·616e·6420·666f·7220·616c·6c20·7573··mmand·for·all·us | ||
| 00000540:·6 | 00000540:·6572·7320·616e·6420·726f·6f74·2e20·4966··ers·and·root.·If | ||
| 00000550:· | 00000550:·2074·6865·203c·7474·3e61·7564·6974·643c···the·<tt>auditd< | ||
| 00000560:·2 | 00000560:·2f74·743e·0a64·6165·6d6f·6e20·6973·2063··/tt>.daemon·is·c | ||
| 00000570:· | 00000570:·6f6e·6669·6775·7265·6420·746f·2075·7365··onfigured·to·use | ||
| 00000580:·746 | 00000580:·2074·6865·203c·7474·3e61·7567·656e·7275···the·<tt>augenru | ||
| 00000590:· | 00000590:·6c65·733c·2f74·743e·2070·726f·6772·616d··les</tt>·program | ||
| 000005a0:· | 000005a0:·2074·6f20·7265·6164·2061·7564·6974·2072···to·read·audit·r | ||
| 000005b0:· | 000005b0:·756c·6573·0a64·7572·696e·6720·6461·656d··ules.during·daem | ||
| 000005c0:· | 000005c0:·6f6e·2073·7461·7274·7570·2028·7468·6520··on·startup·(the· | ||
| 000005d0:· | 000005d0:·6465·6661·756c·7429·2c20·6164·6420·7468··default),·add·th | ||
| 000005e0:·6 | 000005e0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 000005f0:· | 000005f0:·7320·746f·2061·2066·696c·6520·7769·7468··s·to·a·file·with | ||
| 00000600:·20 | 00000600:·2073·7566·6669·780a·3c74·743e·2e72·756c···suffix.<tt>.rul | ||
| 00000610:·6 | 00000610:·6573·3c2f·7474·3e20·696e·2074·6865·2064··es</tt>·in·the·d | ||
| 00000620:· | 00000620:·6972·6563·746f·7279·203c·7474·3e2f·6574··irectory·<tt>/et | ||
| 00000630:·6 | 00000630:·632f·6175·6469·742f·7275·6c65·732e·643c··c/audit/rules.d< | ||
| 00000640:· | 00000640:·2f74·743e·3a0a·3c70·7265·3e2d·6120·616c··/tt>:.<pre>-a·al | ||
| 00000650:·7 | 00000650:·7761·7973·2c65·7869·7420·2d46·2070·6174··ways,exit·-F·pat | ||
| 00000660:·6 | 00000660:·683d·2f75·7372·2f62·696e·2f63·6863·6f6e··h=/usr/bin/chcon | ||
| 00000670:· | 00000670:·202d·4620·7065·726d·3d78·202d·4620·6175···-F·perm=x·-F·au | ||
| 00000680:· | 00000680:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000690:·7 | 00000690:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000006a0:·7 | 000006a0:·793d·7072·6976·696c·6567·6564·3c2f·7072··y=privileged</pr | ||
| 000006b0:· | 000006b0:·653e·0a49·6620·7468·6520·3c74·743e·6175··e>.If·the·<tt>au | ||
| 000006c0:· | 000006c0:·6469·7464·3c2f·7474·3e20·6461·656d·6f6e··ditd</tt>·daemon | ||
| 000006d0:· | 000006d0:·2069·7320·636f·6e66·6967·7572·6564·2074···is·configured·t | ||
| 000006e0:· | 000006e0:·6f20·7573·6520·7468·6520·3c74·743e·6175··o·use·the·<tt>au | ||
| 000006f0:· | 000006f0:·6469·7463·746c·3c2f·7474·3e0a·7574·696c··ditctl</tt>.util | ||
| 00000700:· | 00000700:·6974·7920·746f·2072·6561·6420·6175·6469··ity·to·read·audi | ||
| 00000710:·7 | 00000710:·7420·7275·6c65·7320·6475·7269·6e67·2064··t·rules·during·d | ||
| 00000720:· | 00000720:·6165·6d6f·6e20·7374·6172·7475·702c·2061··aemon·startup,·a | ||
| 00000730:· | 00000730:·6464·2074·6865·2066·6f6c·6c6f·7769·6e67··dd·the·following | ||
| 00000740:· | 00000740:·206c·696e·6573·2074·6f0a·3c74·743e·2f65···lines·to.<tt>/e | ||
| 00000750:·7 | 00000750:·7463·2f61·7564·6974·2f61·7564·6974·2e72··tc/audit/audit.r | ||
| 00000760:· | 00000760:·756c·6573·3c2f·7474·3e20·6669·6c65·3a0a··ules</tt>·file:. | ||
| 00000770:· | 00000770:·3c70·7265·3e2d·6120·616c·7761·7973·2c65··<pre>-a·always,e | ||
| 00000780:· | 00000780:·7869·7420·2d46·2070·6174·683d·2f75·7372··xit·-F·path=/usr | ||
| 00000790:·2 | 00000790:·2f62·696e·2f63·6863·6f6e·202d·4620·7065··/bin/chcon·-F·pe | ||
| 000007a0:· | 000007a0:·726d·3d78·202d·4620·6175·6964·2667·743b··rm=x·-F·auid> | ||
| 000007b0:·3 | 000007b0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000007c0:· | 000007c0:·6e73·6574·202d·4620·6b65·793d·7072·6976··nset·-F·key=priv | ||
| 000007d0:· | 000007d0:·696c·6567·6564·3c2f·7072·653e·0a20·2020··ileged</pre>.··· | ||
| 000007e0:· | 000007e0:·2020·203c·2f74·643e·0a20·2020·2020·203c·····</td>.······< | ||
| 000007f0:·46 | 000007f0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000800:· | 00000800:·5553·223e·0a20·2020·2020·2020·204d·6973··US">.········Mis | ||
| 00000810:· | 00000810:·7573·6520·6f66·2070·7269·7669·6c65·6765··use·of·privilege | ||
| 00000820:· | 00000820:·6420·6675·6e63·7469·6f6e·732c·2065·6974··d·functions,·eit | ||
| 00000830:· | 00000830:·6865·7220·696e·7465·6e74·696f·6e61·6c6c··her·intentionall | ||
| 00000840:· | 00000840:·7920·6f72·2075·6e69·6e74·656e·7469·6f6e··y·or·unintention | ||
| 00000850:· | 00000850:·616c·6c79·2062·790a·6175·7468·6f72·697a··ally·by.authoriz | ||
| 00000860:·20 | 00000860:·6564·2075·7365·7273·2c20·6f72·2062·7920··ed·users,·or·by· | ||
| 00000870:· | 00000870:·756e·6175·7468·6f72·697a·6564·2065·7874··unauthorized·ext | ||
| 00000880:· | 00000880:·6572·6e61·6c20·656e·7469·7469·6573·2074··ernal·entities·t | ||
| 00000890:·6 | 00000890:·6861·7420·6861·7665·2063·6f6d·7072·6f6d··hat·have·comprom | ||
| 000008a0:· | 000008a0:·6973·6564·2073·7973·7465·6d20·6163·636f··ised·system·acco | ||
| 000008b0:· | 000008b0:·756e·7473·2c0a·6973·2061·2073·6572·696f··unts,.is·a·serio | ||
| 000008c0:· | 000008c0:·7573·2061·6e64·206f·6e67·6f69·6e67·2063··us·and·ongoing·c | ||
| 000008d0:· | 000008d0:·6f6e·6365·726e·2061·6e64·2063·616e·2068··oncern·and·can·h | ||
| 000008e0:·6 | 000008e0:·6176·6520·7369·676e·6966·6963·616e·7420··ave·significant· | ||
| 000008f0:· | 000008f0:·6164·7665·7273·6520·696d·7061·6374·7320··adverse·impacts· | ||
| 00000900:·6 | 00000900:·6f6e·206f·7267·616e·697a·6174·696f·6e73··on·organizations | ||
| 00000910:· | 00000910:·2e0a·4175·6469·7469·6e67·2074·6865·2075··..Auditing·the·u | ||
| 00000920:· | 00000920:·7365·206f·6620·7072·6976·696c·6567·6564··se·of·privileged | ||
| 00000930:· | 00000930:·2066·756e·6374·696f·6e73·2069·7320·6f6e···functions·is·on | ||
| 00000940:·6 | 00000940:·6520·7761·7920·746f·2064·6574·6563·7420··e·way·to·detect· | ||
| 00000950:· | 00000950:·7375·6368·206d·6973·7573·6520·616e·6420··such·misuse·and· | ||
| 00000960:·696 | 00000960:·6964·656e·7469·6679·0a74·6865·2072·6973··identify.the·ris | ||
| 00000970:·6 | 00000970:·6b20·6672·6f6d·2069·6e73·6964·6572·2061··k·from·insider·a | ||
| 00000980:·6 | 00000980:·6e64·2061·6476·616e·6365·6420·7065·7273··nd·advanced·pers | ||
| 00000990:·73 | 00000990:·6973·7465·6e74·2074·6872·6561·7473·2e0a··istent·threats.. | ||
| 000009a0:· | 000009a0:·3c62·7220·2f3e·3c62·7220·2f3e·0a50·7269··<br·/><br·/>.Pri | ||
| 000009b0:· | 000009b0:·7669·6c65·6765·6420·7072·6f67·7261·6d73··vileged·programs | ||
| 000009c0:·20 | 000009c0:·2061·7265·2073·7562·6a65·6374·2074·6f20···are·subject·to· | ||
| 000009d0:·657 | 000009d0:·6573·6361·6c61·7469·6f6e·2d6f·662d·7072··escalation-of-pr | ||
| 000009e0:· | 000009e0:·6976·696c·6567·6520·6174·7461·636b·732c··ivilege·attacks, | ||
| 000009f0:· | 000009f0:·0a77·6869·6368·2061·7474·656d·7074·2074··.which·attempt·t | ||
| 00000a00:· | 00000a00:·6f20·7375·6276·6572·7420·7468·6569·7220··o·subvert·their· | ||
| 00000a10:· | 00000a10:·6e6f·726d·616c·2072·6f6c·6520·6f66·2070··normal·role·of·p | ||
| 00000a20:· | 00000a20:·726f·7669·6469·6e67·2073·6f6d·6520·6e65··roviding·some·ne | ||
| 00000a30:·6 | 00000a30:·6365·7373·6172·7920·6275·740a·6c69·6d69··cessary·but.limi | ||
| 00000a40:· | 00000a40:·7465·6420·6361·7061·6269·6c69·7479·2e20··ted·capability.· | ||
| 00000a50:· | 00000a50:·4173·2073·7563·682c·206d·6f74·6976·6174··As·such,·motivat | ||
| 00000a60:·6 | 00000a60:·696f·6e20·6578·6973·7473·2074·6f20·6d6f··ion·exists·to·mo | ||
| 00000a70:·6 | 00000a70:·6e69·746f·7220·7468·6573·6520·7072·6f67··nitor·these·prog | ||
| 00000a80:· | 00000a80:·7261·6d73·2066·6f72·0a75·6e75·7375·616c··rams·for.unusual | ||
| 00000a90:· | 00000a90:·2061·6374·6976·6974·792e·0a20·2020·2020···activity..····· | ||
| 00000aa0:· | 00000aa0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | ||
| 00000ab0:· | 00000ab0:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | ||
| 00000ac0:· | 00000ac0:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000ad0:· | 00000ad0:·4155·2d31·3228·6329·3c62·722f·3e43·4d2d··AU-12(c)<br/>CM- | ||
| 00000ae0:· | 00000ae0:·3628·6129·3c2f·7464·3e0a·2020·2020·2020··6(a)</td>.······ | ||
| 00000af0:· | 00000af0:·3c74·643e·5265·636f·7264·2055·6e73·7563··<td>Record·Unsuc | ||
| 00000b00:· | 00000b00:·6365·7373·6675·6c20·4465·6c65·7465·2041··cessful·Delete·A | ||
| 00000b10:· | 00000b10:·7474·656d·7074·7320·746f·2046·696c·6573··ttempts·to·Files | ||
| 00000b20:· | 00000b20:·202d·2075·6e6c·696e·6b3c·2f74·643e·0a20···-·unlink</td>.· | ||
| 00000b30:· | 00000b30:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000b40:· | 00000b40:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000b50:· | 00000b50:·2020·200a·5468·6520·6175·6469·7420·7379·····.The·audit·sy | ||
| 00000b60:·7 | 00000b60:·7374·656d·2073·686f·756c·6420·636f·6c6c··stem·should·coll | ||
| 00000b70:·6 | 00000b70:·6563·7420·756e·7375·6363·6573·7366·756c··ect·unsuccessful | ||
| 00000b80:·6 | 00000b80:·2066·696c·6520·6465·6c65·7469·6f6e·0a61···file·deletion.a | ||
| 00000b90:·7 | 00000b90:·7474·656d·7074·7320·666f·7220·616c·6c20··ttempts·for·all· | ||
| 00000ba0:· | 00000ba0:·7573·6572·7320·616e·6420·726f·6f74·2e20··users·and·root.· | ||
| 00000bb0:· | 00000bb0:·4966·2074·6865·203c·7474·3e61·7564·6974··If·the·<tt>audit | ||
| 00000bc0:· | 00000bc0:·643c·2f74·743e·2064·6165·6d6f·6e20·6973··d</tt>·daemon·is | ||
| 00000bd0:· | 00000bd0:·2063·6f6e·6669·6775·7265·640a·746f·2075···configured.to·u | ||
| 00000be0:·207 | 00000be0:·7365·2074·6865·203c·7474·3e61·7567·656e··se·the·<tt>augen | ||
| Max diff block lines reached; 6921244/7295388 bytes (94.87%) of diff not shown. | |||
| Offset 173, 14 lines modified | Offset 173, 28 lines modified | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 175 | anti-spoofing·measure. | 175 | anti-spoofing·measure. |
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| 181 | ······<td·xml:lang="en-US"> | ||
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 183 | <pre> | ||
| 184 | $·sudo·yum·install·iptables</pre> | ||
| 185 | ······</td> | ||
| 186 | ······<td·xml:lang="en-US"> | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 189 | masquerading,·etc. | ||
| 190 | ······</td> | ||
| 191 | ····</tr> | ||
| 192 | ····<tr> | ||
| 193 | ······<td>Req-1.4.1</td> | ||
| 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 181 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 183 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 184 | ······</td> | 198 | ······</td> |
| 185 | ······<td·xml:lang="en-US"> | 199 | ······<td·xml:lang="en-US"> |
| 186 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a |
| Offset 188, 28 lines modified | Offset 202, 14 lines modified | ||
| 188 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, |
| 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 191 | enables·the·system·to·continue·servicing·valid·connection·requests. | 205 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 192 | ······</td> | 206 | ······</td> |
| 193 | ····</tr> | 207 | ····</tr> |
| 194 | ····<tr> | 208 | ····<tr> |
| 195 | ······<td>Req-1.4.1</td> | ||
| 196 | ······<td>Install·iptables·Package</td> | ||
| 197 | ······<td·xml:lang="en-US"> | ||
| 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 199 | <pre> | ||
| 200 | $·sudo·yum·install·iptables</pre> | ||
| 201 | ······</td> | ||
| 202 | ······<td·xml:lang="en-US"> | ||
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | masquerading,·etc. | ||
| 206 | ······</td> | ||
| 207 | ····</tr> | ||
| 208 | ····<tr> | ||
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 213 | transport·layer·protocol,·designed·to·support·the·idea·of | 213 | transport·layer·protocol,·designed·to·support·the·idea·of |
| 214 | message-oriented·communication,·with·several·streams·of·messages | 214 | message-oriented·communication,·with·several·streams·of·messages |
| 215 | within·one·connection. | 215 | within·one·connection. |
| Offset 246, 32 lines modified | Offset 246, 14 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| 252 | ······<td>Req-1.4.3</td> | 252 | ······<td>Req-1.4.3</td> |
| 253 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> | ||
| 254 | ······<td·xml:lang="en-US"> | ||
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> | ||
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> | ||
| 257 | ······</td> | ||
| 258 | ······<td·xml:lang="en-US"> | ||
| 259 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | ||
| 260 | forward·the·packet·along·a·different·path·than·configured·on·the·router,·which·can | ||
| 261 | be·used·to·bypass·network·security·measures.·This·requirement·applies·only·to·the | ||
| 262 | forwarding·of·source-routerd·traffic,·such·as·when·IPv6·forwarding·is·enabled·and | ||
| 263 | the·system·is·functioning·as·a·router. | ||
| 264 | Accepting·source-routed·packets·in·the·IPv6·protocol·has·few·legitimate | ||
| 265 | uses.·It·should·be·disabled·unless·it·is·absolutely·required. | ||
| 266 | ······</td> | ||
| 267 | ····</tr> | ||
| 268 | ····<tr> | ||
| 269 | ······<td>Req-1.4.3</td> | ||
| 270 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> | 253 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> |
| 271 | ······<td·xml:lang="en-US"> | 254 | ······<td·xml:lang="en-US"> |
| 272 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> | 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> |
| 273 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> | 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> |
| 274 | ······</td> | 257 | ······</td> |
| 275 | ······<td·xml:lang="en-US"> | 258 | ······<td·xml:lang="en-US"> |
| 276 | ········Ignoring·bogus·ICMP·error·responses·reduces | 259 | ········Ignoring·bogus·ICMP·error·responses·reduces |
| Offset 291, 26 lines modified | Offset 273, 28 lines modified | ||
| 291 | <br·/> | 273 | <br·/> |
| 292 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | 274 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast |
| 293 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | 275 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. |
| 294 | ······</td> | 276 | ······</td> |
| 295 | ····</tr> | 277 | ····</tr> |
| 296 | ····<tr> | 278 | ····<tr> |
| 297 | ······<td>Req-1.4.3</td> | 279 | ······<td>Req-1.4.3</td> |
| 298 | ······<td>Disable·Kernel·Parameter·for·Accepting· | 280 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> |
| 299 | ······<td·xml:lang="en-US"> | 281 | ······<td·xml:lang="en-US"> |
| 300 | ········To·set·the·runtime·status·of·the·<code>net.ipv | 282 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> |
| 301 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv | 283 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> |
| 302 | ······</td> | 284 | ······</td> |
| 303 | ······<td·xml:lang="en-US"> | 285 | ······<td·xml:lang="en-US"> |
| 304 | ········ICMP·redirect·messages·are·used·by·routers·to·inform·hosts·that·a·more | ||
| 305 | direct·route·exists·for·a·particular·destination.·These·messages·modify·the | ||
| 306 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect | ||
| 307 | message·could·result·in·a·man-in-the-middle·attack. | ||
| 308 | 286 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | |
| 287 | forward·the·packet·along·a·different·path·than·configured·on·the·router,·which·can | ||
| 288 | be·used·to·bypass·network·security·measures.·This·requirement·applies·only·to·the | ||
| 289 | forwarding·of·source-routerd·traffic,·such·as·when·IPv6·forwarding·is·enabled·and | ||
| 290 | the·system·is·functioning·as·a·router. | ||
| 291 | Accepting·source-routed·packets·in·the·IPv6·protocol·has·few·legitimate | ||
| 309 | be·disabled·unless·absolutely·required. | 292 | uses.·It·should·be·disabled·unless·it·is·absolutely·required. |
| 310 | ······</td> | 293 | ······</td> |
| 311 | ····</tr> | 294 | ····</tr> |
| 312 | ····<tr> | 295 | ····<tr> |
| 313 | ······<td>Req-1.4.3</td> | 296 | ······<td>Req-1.4.3</td> |
| 314 | ······<td>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</td> | 297 | ······<td>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</td> |
| 315 | ······<td·xml:lang="en-US"> | 298 | ······<td·xml:lang="en-US"> |
| 316 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.secure_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0</pre> | 299 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.secure_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0</pre> |
| Offset 334, 14 lines modified | Offset 318, 50 lines modified | ||
| 334 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were | 318 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were |
| 335 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for | 319 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for |
| 336 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small | 320 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small |
| Max diff block lines reached; 285940/293161 bytes (97.54%) of diff not shown. | |||
| Offset 129, 14 lines modified | Offset 129, 23 lines modified | ||
| 129 | ····················································································network·traffic | 129 | ····················································································network·traffic |
| 130 | ····················································································should·be·seen,·all | 130 | ····················································································should·be·seen,·all |
| 131 | ····················································································other·interfaces | 131 | ····················································································other·interfaces |
| 132 | ····················································································should·ignore | 132 | ····················································································should·ignore |
| 133 | ····················································································traffic·on·this | 133 | ····················································································traffic·on·this |
| 134 | ····················································································network·as·an·anti- | 134 | ····················································································network·as·an·anti- |
| 135 | ····················································································spoofing·measure. | 135 | ····················································································spoofing·measure. |
| 136 | ····················································································iptables·controls | ||
| 137 | ····················································································the·Linux·kernel | ||
| 138 | ····················································································network·packet | ||
| 139 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 140 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 141 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 142 | ····················································································set·up·firewalls | ||
| 143 | ····················································································and·IP | ||
| 144 | ····················································································masquerading,·etc. | ||
| 136 | ····················································································A·TCP·SYN·flood | 145 | ····················································································A·TCP·SYN·flood |
| 137 | ····················································································attack·can·cause·a | 146 | ····················································································attack·can·cause·a |
| 138 | ····················································································denial·of·service | 147 | ····················································································denial·of·service |
| 139 | ····················································································by·filling·a | 148 | ····················································································by·filling·a |
| 140 | ····················································································system's·TCP | 149 | ····················································································system's·TCP |
| 141 | ····················································································connection·table | 150 | ····················································································connection·table |
| 142 | ····················································································with·connections·in | 151 | ····················································································with·connections·in |
| Offset 155, 23 lines modified | Offset 164, 14 lines modified | ||
| 155 | ····················································································flood·condition·is | 164 | ····················································································flood·condition·is |
| 156 | ····················································································detected,·and | 165 | ····················································································detected,·and |
| 157 | ····················································································enables·the·system | 166 | ····················································································enables·the·system |
| 158 | ····················································································to·continue | 167 | ····················································································to·continue |
| 159 | ····················································································servicing·valid | 168 | ····················································································servicing·valid |
| 160 | ····················································································connection | 169 | ····················································································connection |
| 161 | ····················································································requests. | 170 | ····················································································requests. |
| 162 | ····················································································iptables·controls | ||
| 163 | ····················································································the·Linux·kernel | ||
| 164 | ····················································································network·packet | ||
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 168 | ····················································································set·up·firewalls | ||
| 169 | ····················································································and·IP | ||
| 170 | ····················································································masquerading,·etc. | ||
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 14 lines modified | Offset 187, 39 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. | 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. |
| 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ | 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ |
| 192 | ·····························dccp.conf: | 192 | ·····························dccp.conf: |
| 193 | ·····························blacklist·dccp | 193 | ·····························blacklist·dccp |
| 194 | ·····························To·set·the·runtime·status·of·the | ||
| 195 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 196 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 197 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 198 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 199 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 200 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 201 | ·····························sysctl.d: | ||
| 202 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 203 | ····················································································Responding·to | ||
| 204 | ····················································································broadcast·(ICMP) | ||
| 205 | ····················································································echoes·facilitates | ||
| 206 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 207 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 208 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 209 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 210 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 211 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 212 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 213 | ·····························sysctl.d:··············································or·multicast | ||
| 214 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 215 | ····················································································system·slightly | ||
| 216 | ····················································································more·difficult·to | ||
| 217 | ····················································································enumerate·on·the | ||
| 218 | ····················································································network. | ||
| 194 | ····················································································Source-routed | 219 | ····················································································Source-routed |
| 195 | ····················································································packets·allow·the | 220 | ····················································································packets·allow·the |
| 196 | ····················································································source·of·the | 221 | ····················································································source·of·the |
| 197 | ····················································································packet·to·suggest | 222 | ····················································································packet·to·suggest |
| 198 | ····················································································routers·forward·the | 223 | ····················································································routers·forward·the |
| 199 | ····················································································packet·along·a | 224 | ····················································································packet·along·a |
| 200 | ····················································································different·path·than | 225 | ····················································································different·path·than |
| Offset 218, 63 lines modified | Offset 243, 14 lines modified | ||
| 218 | ····················································································packets·in·the·IPv6 | 243 | ····················································································packets·in·the·IPv6 |
| 219 | ····················································································protocol·has·few | 244 | ····················································································protocol·has·few |
| 220 | ····················································································legitimate·uses.·It | 245 | ····················································································legitimate·uses.·It |
| 221 | ····················································································should·be·disabled | 246 | ····················································································should·be·disabled |
| 222 | ····················································································unless·it·is | 247 | ····················································································unless·it·is |
| 223 | ····················································································absolutely | 248 | ····················································································absolutely |
| 224 | ····················································································required. | 249 | ····················································································required. |
| 225 | ·····························To·set·the·runtime·status·of·the | ||
| 226 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 227 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 228 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 229 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 230 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 231 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 232 | ·····························sysctl.d: | ||
| 233 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 234 | ····················································································Responding·to | ||
| 235 | ····················································································broadcast·(ICMP) | ||
| 236 | ····················································································echoes·facilitates | ||
| 237 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 238 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 239 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 240 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 241 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 242 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 243 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 244 | ·····························sysctl.d:··············································or·multicast | ||
| 245 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 246 | ····················································································system·slightly | ||
| 247 | ····················································································more·difficult·to | ||
| 248 | ····················································································enumerate·on·the | ||
| 249 | ····················································································network. | ||
| 250 | ····················································································ICMP·redirect | ||
| 251 | ····················································································messages·are·used | ||
| 252 | ····················································································by·routers·to | ||
| 253 | ····················································································inform·hosts·that·a | ||
| 254 | ····················································································more·direct·route | ||
| 255 | ····················································································exists·for·a | ||
| 256 | ····················································································particular | ||
| Max diff block lines reached; 467966/481973 bytes (97.09%) of diff not shown. | |||
| Offset 69, 14921 lines modified | Offset 69, 14921 lines modified | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | ||
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | ||
| 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | Diff chunk too large, falling back to line-by-line diff (11226 lines added, 11226 lines removed) | |
| 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 000004b0:· | 000004b0:·5265·636f·7264·2041·6e79·2041·7474·656d··Record·Any·Attem | ||
| 000004c0:· | 000004c0:·7074·7320·746f·2052·756e·2063·6863·6f6e··pts·to·Run·chcon | ||
| 000004d0:· | 000004d0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 000004e0:· | 000004e0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| 000004f0:· | 000004f0:·3e0a·2020·2020·2020·2020·4174·2061·206d··>.········At·a·m | ||
| 00000500:·6 | 00000500:·696e·696d·756d·2c20·7468·6520·6175·6469··inimum,·the·audi | ||
| 00000510:· | 00000510:·7420·7379·7374·656d·2073·686f·756c·6420··t·system·should· | ||
| 00000520:· | 00000520:·636f·6c6c·6563·7420·616e·7920·6578·6563··collect·any·exec | ||
| 00000530:· | 00000530:·7574·696f·6e20·6174·7465·6d70·740a·6f66··ution·attempt.of | ||
| 00000540:· | 00000540:·2074·6865·203c·7474·3e63·6863·6f6e·3c2f···the·<tt>chcon</ | ||
| 00000550:· | 00000550:·7474·3e20·636f·6d6d·616e·6420·666f·7220··tt>·command·for· | ||
| 00000560:·6 | 00000560:·616c·6c20·7573·6572·7320·616e·6420·726f··all·users·and·ro | ||
| 00000570:·6 | 00000570:·6f74·2e20·4966·2074·6865·203c·7474·3e61··ot.·If·the·<tt>a | ||
| 00000580:· | 00000580:·7564·6974·643c·2f74·743e·0a64·6165·6d6f··uditd</tt>.daemo | ||
| 00000590:·207 | 00000590:·6e20·6973·2063·6f6e·6669·6775·7265·6420··n·is·configured· | ||
| 000005a0:·74 | 000005a0:·746f·2075·7365·2074·6865·203c·7474·3e61··to·use·the·<tt>a | ||
| 000005b0:· | 000005b0:·7567·656e·7275·6c65·733c·2f74·743e·2070··ugenrules</tt>·p | ||
| 000005c0:· | 000005c0:·726f·6772·616d·2074·6f20·7265·6164·2061··rogram·to·read·a | ||
| 000005d0:·7 | 000005d0:·7564·6974·2072·756c·6573·0a64·7572·696e··udit·rules.durin | ||
| 000005e0:· | 000005e0:·6720·6461·656d·6f6e·2073·7461·7274·7570··g·daemon·startup | ||
| 000005f0:· | 000005f0:·2028·7468·6520·6465·6661·756c·7429·2c20···(the·default),· | ||
| 00000600:· | 00000600:·6164·6420·7468·6520·666f·6c6c·6f77·696e··add·the·followin | ||
| 00000610:· | 00000610:·6720·6c69·6e65·7320·746f·2061·2066·696c··g·lines·to·a·fil | ||
| 00000620:· | 00000620:·6520·7769·7468·2073·7566·6669·780a·3c74··e·with·suffix.<t | ||
| 00000630:· | 00000630:·743e·2e72·756c·6573·3c2f·7474·3e20·696e··t>.rules</tt>·in | ||
| 00000640:· | 00000640:·2074·6865·2064·6972·6563·746f·7279·203c···the·directory·< | ||
| 00000650:·74 | 00000650:·7474·3e2f·6574·632f·6175·6469·742f·7275··tt>/etc/audit/ru | ||
| 00000660:· | 00000660:·6c65·732e·643c·2f74·743e·3a0a·3c70·7265··les.d</tt>:.<pre | ||
| 00000670:· | 00000670:·3e2d·6120·616c·7761·7973·2c65·7869·7420··>-a·always,exit· | ||
| 00000680:· | 00000680:·2d46·2070·6174·683d·2f75·7372·2f62·696e··-F·path=/usr/bin | ||
| 00000690:· | 00000690:·2f63·6863·6f6e·202d·4620·6175·6964·2667··/chcon·-F·auid&g | ||
| 000006a0:· | 000006a0:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 000006b0:· | 000006b0:·3d75·6e73·6574·202d·4620·6b65·793d·7072··=unset·-F·key=pr | ||
| 000006c0:· | 000006c0:·6976·696c·6567·6564·3c2f·7072·653e·0a49··ivileged</pre>.I | ||
| 000006d0:· | 000006d0:·6620·7468·6520·3c74·743e·6175·6469·7464··f·the·<tt>auditd | ||
| 000006e0:·3 | 000006e0:·3c2f·7474·3e20·6461·656d·6f6e·2069·7320··</tt>·daemon·is· | ||
| 000006f0:·6 | 000006f0:·636f·6e66·6967·7572·6564·2074·6f20·7573··configured·to·us | ||
| 00000700:·6 | 00000700:·6520·7468·6520·3c74·743e·6175·6469·7463··e·the·<tt>auditc | ||
| 00000710:·746 | 00000710:·746c·3c2f·7474·3e0a·7574·696c·6974·7920··tl</tt>.utility· | ||
| 00000720:·74 | 00000720:·746f·2072·6561·6420·6175·6469·7420·7275··to·read·audit·ru | ||
| 00000730:·6 | 00000730:·6c65·7320·6475·7269·6e67·2064·6165·6d6f··les·during·daemo | ||
| 00000740:· | 00000740:·6e20·7374·6172·7475·702c·2061·6464·2074··n·startup,·add·t | ||
| 00000750:· | 00000750:·6865·2066·6f6c·6c6f·7769·6e67·206c·696e··he·following·lin | ||
| 00000760:· | 00000760:·6573·2074·6f0a·3c74·743e·2f65·7463·2f61··es·to.<tt>/etc/a | ||
| 00000770:·7 | 00000770:·7564·6974·2f61·7564·6974·2e72·756c·6573··udit/audit.rules | ||
| 00000780:· | 00000780:·3c2f·7474·3e20·6669·6c65·3a0a·3c70·7265··</tt>·file:.<pre | ||
| 00000790:· | 00000790:·3e2d·6120·616c·7761·7973·2c65·7869·7420··>-a·always,exit· | ||
| 000007a0:· | 000007a0:·2d46·2070·6174·683d·2f75·7372·2f62·696e··-F·path=/usr/bin | ||
| 000007b0:· | 000007b0:·2f63·6863·6f6e·202d·4620·6175·6964·2667··/chcon·-F·auid&g | ||
| 000007c0:·74 | 000007c0:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 000007d0:· | 000007d0:·3d75·6e73·6574·202d·4620·6b65·793d·7072··=unset·-F·key=pr | ||
| 000007e0:· | 000007e0:·6976·696c·6567·6564·3c2f·7072·653e·0a20··ivileged</pre>.· | ||
| 000007f0:· | 000007f0:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | ||
| 00000800:·7 | 00000800:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 00000810:·6 | 00000810:·6e2d·5553·223e·0a20·2020·2020·2020·204d··n-US">.········M | ||
| 00000820:· | 00000820:·6973·7573·6520·6f66·2070·7269·7669·6c65··isuse·of·privile | ||
| 00000830:· | 00000830:·6765·6420·6675·6e63·7469·6f6e·732c·2065··ged·functions,·e | ||
| 00000840:·6 | 00000840:·6974·6865·7220·696e·7465·6e74·696f·6e61··ither·intentiona | ||
| 00000850:· | 00000850:·6c6c·7920·6f72·2075·6e69·6e74·656e·7469··lly·or·unintenti | ||
| 00000860:·6 | 00000860:·6f6e·616c·6c79·2062·790a·6175·7468·6f72··onally·by.author | ||
| 00000870:· | 00000870:·697a·6564·2075·7365·7273·2c20·6f72·2062··ized·users,·or·b | ||
| 00000880:·7 | 00000880:·7920·756e·6175·7468·6f72·697a·6564·2065··y·unauthorized·e | ||
| 00000890:·7 | 00000890:·7874·6572·6e61·6c20·656e·7469·7469·6573··xternal·entities | ||
| 000008a0:· | 000008a0:·2074·6861·7420·6861·7665·2063·6f6d·7072···that·have·compr | ||
| 000008b0:·6 | 000008b0:·6f6d·6973·6564·2073·7973·7465·6d20·6163··omised·system·ac | ||
| 000008c0:·7 | 000008c0:·636f·756e·7473·2c0a·6973·2061·2073·6572··counts,.is·a·ser | ||
| 000008d0:·6 | 000008d0:·696f·7573·2061·6e64·206f·6e67·6f69·6e67··ious·and·ongoing | ||
| 000008e0:· | 000008e0:·2063·6f6e·6365·726e·2061·6e64·2063·616e···concern·and·can | ||
| 000008f0:· | 000008f0:·2068·6176·6520·7369·676e·6966·6963·616e···have·significan | ||
| 00000900:· | 00000900:·7420·6164·7665·7273·6520·696d·7061·6374··t·adverse·impact | ||
| 00000910:· | 00000910:·7320·6f6e·206f·7267·616e·697a·6174·696f··s·on·organizatio | ||
| 00000920:· | 00000920:·6e73·2e0a·4175·6469·7469·6e67·2074·6865··ns..Auditing·the | ||
| 00000930:· | 00000930:·2075·7365·206f·6620·7072·6976·696c·6567···use·of·privileg | ||
| 00000940:· | 00000940:·6564·2066·756e·6374·696f·6e73·2069·7320··ed·functions·is· | ||
| 00000950:·6 | 00000950:·6f6e·6520·7761·7920·746f·2064·6574·6563··one·way·to·detec | ||
| 00000960:·7 | 00000960:·7420·7375·6368·206d·6973·7573·6520·616e··t·such·misuse·an | ||
| 00000970:·6 | 00000970:·6420·6964·656e·7469·6679·0a74·6865·2072··d·identify.the·r | ||
| 00000980:· | 00000980:·6973·6b20·6672·6f6d·2069·6e73·6964·6572··isk·from·insider | ||
| 00000990:· | 00000990:·2061·6e64·2061·6476·616e·6365·6420·7065···and·advanced·pe | ||
| 000009a0:·2 | 000009a0:·7273·6973·7465·6e74·2074·6872·6561·7473··rsistent·threats | ||
| 000009b0:· | 000009b0:·2e0a·3c62·7220·2f3e·3c62·7220·2f3e·0a50··..<br·/><br·/>.P | ||
| 000009c0:· | 000009c0:·7269·7669·6c65·6765·6420·7072·6f67·7261··rivileged·progra | ||
| 000009d0:·6 | 000009d0:·6d73·2061·7265·2073·7562·6a65·6374·2074··ms·are·subject·t | ||
| 000009e0:·6 | 000009e0:·6f20·6573·6361·6c61·7469·6f6e·2d6f·662d··o·escalation-of- | ||
| 000009f0:· | 000009f0:·7072·6976·696c·6567·6520·6174·7461·636b··privilege·attack | ||
| 00000a00:· | 00000a00:·732c·0a77·6869·6368·2061·7474·656d·7074··s,.which·attempt | ||
| 00000a10:·2 | 00000a10:·2074·6f20·7375·6276·6572·7420·7468·6569···to·subvert·thei | ||
| 00000a20:·6 | 00000a20:·7220·6e6f·726d·616c·2072·6f6c·6520·6f66··r·normal·role·of | ||
| 00000a30:· | 00000a30:·2070·726f·7669·6469·6e67·2073·6f6d·6520···providing·some· | ||
| 00000a40:· | 00000a40:·6e65·6365·7373·6172·7920·6275·740a·6c69··necessary·but.li | ||
| 00000a50:· | 00000a50:·6d69·7465·6420·6361·7061·6269·6c69·7479··mited·capability | ||
| 00000a60:· | 00000a60:·2e20·4173·2073·7563·682c·206d·6f74·6976··.·As·such,·motiv | ||
| 00000a70:· | 00000a70:·6174·696f·6e20·6578·6973·7473·2074·6f20··ation·exists·to· | ||
| 00000a80:·6 | 00000a80:·6d6f·6e69·746f·7220·7468·6573·6520·7072··monitor·these·pr | ||
| 00000a90:·6f6 | 00000a90:·6f67·7261·6d73·2066·6f72·0a75·6e75·7375··ograms·for.unusu | ||
| 00000aa0:· | 00000aa0:·616c·2061·6374·6976·6974·792e·0a20·2020··al·activity..··· | ||
| 00000ab0:· | 00000ab0:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00000ac0:· | 00000ac0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00000ad0:·20 | 00000ad0:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000ae0:· | 00000ae0:·2f3e·4155·2d31·3228·6329·3c62·722f·3e43··/>AU-12(c)<br/>C | ||
| 00000af0:· | 00000af0:·4d2d·3628·6129·3c2f·7464·3e0a·2020·2020··M-6(a)</td>.···· | ||
| 00000b00:· | 00000b00:·2020·3c74·643e·5265·636f·7264·2055·6e73····<td>Record·Uns | ||
| 00000b10:· | 00000b10:·7563·6365·7373·6675·6c20·4465·6c65·7465··uccessful·Delete | ||
| 00000b20:·20 | 00000b20:·2041·7474·656d·7074·7320·746f·2046·696c···Attempts·to·Fil | ||
| 00000b30:· | 00000b30:·6573·202d·2075·6e6c·696e·6b3c·2f74·643e··es·-·unlink</td> | ||
| 00000b40:· | 00000b40:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000b50:· | 00000b50:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000b60:·20 | 00000b60:·2020·2020·200a·5468·6520·6175·6469·7420·······.The·audit· | ||
| 00000b70:· | 00000b70:·7379·7374·656d·2073·686f·756c·6420·636f··system·should·co | ||
| 00000b80:· | 00000b80:·6c6c·6563·7420·756e·7375·6363·6573·7366··llect·unsuccessf | ||
| 00000b90:·6 | 00000b90:·756c·2066·696c·6520·6465·6c65·7469·6f6e··ul·file·deletion | ||
| 00000ba0:· | 00000ba0:·0a61·7474·656d·7074·7320·666f·7220·616c··.attempts·for·al | ||
| 00000bb0:· | 00000bb0:·6c20·7573·6572·7320·616e·6420·726f·6f74··l·users·and·root | ||
| 00000bc0:· | 00000bc0:·2e20·4966·2074·6865·203c·7474·3e61·7564··.·If·the·<tt>aud | ||
| 00000bd0:· | 00000bd0:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 00000be0:· | 00000be0:·6973·2063·6f6e·6669·6775·7265·640a·746f··is·configured.to | ||
| 00000bf0:· | 00000bf0:·2075·7365·2074·6865·203c·7474·3e61·7567···use·the·<tt>aug | ||
| 00000c00:· | 00000c00:·656e·7275·6c65·733c·2f74·743e·2070·726f··enrules</tt>·pro | ||
| 00000c10:·6 | 00000c10:·6772·616d·2074·6f20·7265·6164·2061·7564··gram·to·read·aud | ||
| Max diff block lines reached; 6156866/7706632 bytes (79.89%) of diff not shown. | |||
| Offset 186, 158 lines modified | Offset 186, 158 lines modified | ||
| 00000b90:·6865·7220·4578·6563·7574·6520·4469·7361··her·Execute·Disa | 00000b90:·6865·7220·4578·6563·7574·6520·4469·7361··her·Execute·Disa | ||
| 00000ba0:·626c·6520·2858·4429·206f·7220·4e6f·2045··ble·(XD)·or·No·E | 00000ba0:·626c·6520·2858·4429·206f·7220·4e6f·2045··ble·(XD)·or·No·E | ||
| 00000bb0:·7865·6375·7465·2028·4e58·2920·7375·7070··xecute·(NX)·supp | 00000bb0:·7865·6375·7465·2028·4e58·2920·7375·7070··xecute·(NX)·supp | ||
| 00000bc0:·6f72·742e·0a20·2020·2020·203c·2f74·643e··ort..······</td> | 00000bc0:·6f72·742e·0a20·2020·2020·203c·2f74·643e··ort..······</td> | ||
| 00000bd0:·0a20·2020·203c·2f74·723e·0a20·2020·203c··.····</tr>.····< | 00000bd0:·0a20·2020·203c·2f74·723e·0a20·2020·203c··.····</tr>.····< | ||
| 00000be0:·7472·3e0a·2020·2020·2020·3c74·643e·5231··tr>.······<td>R1 | 00000be0:·7472·3e0a·2020·2020·2020·3c74·643e·5231··tr>.······<td>R1 | ||
| 00000bf0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | 00000bf0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 00000c00:·5072·6566·6572·2074·6f20·7573·6520·6120··Prefer·to·use·a· | |||
| 00000c10:·3634·2d62·6974·204f·7065·7261·7469·6e67··64-bit·Operating | |||
| 00000c00:·496e·7374·616c·6c20·7468·6520·6472·6163··Install·the·drac | |||
| 00000c10:·7574·2d66·6970·732d·6165·736e·6920·5061··ut-fips-aesni·Pa | |||
| 00000c20:·636b·6167·653c·2f74·643e·0a20·2020·2020··ckage</td>.····· | |||
| 00000c30:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000c40:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | |||
| 00000c50:·6f20·656e·6162·6c65·2046·4950·5320·6f6e··o·enable·FIPS·on | |||
| 00000c | 00000c20:·2053·7973·7465·6d20·7768·656e·2073·7570···System·when·sup | ||
| 00000c30:·706f·7274·6564·3c2f·7464·3e0a·2020·2020··ported</td>.···· | |||
| 00000c40:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 00000c50:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 00000c60:·5072·6566·6572·2069·6e73·7461·6c6c·6174··Prefer·installat | |||
| 00000c70:·696f·6e20·6f66·2036·342d·6269·7420·6f70··ion·of·64-bit·op | |||
| 00000c80:·6572·6174·696e·6720·7379·7374·656d·7320··erating·systems· | |||
| 00000c90:·7768·656e·2074·6865·2043·5055·2073·7570··when·the·CPU·sup | |||
| 00000ca0:·706f·7274·7320·6974·2e0a·2020·2020·2020··ports·it..······ | |||
| 00000c70:·706f·7274·2074·6865·2041·6476·616e·6365··port·the·Advance | |||
| 00000c80:·6420·456e·6372·7970·7469·6f6e·2053·7461··d·Encryption·Sta | |||
| 00000c90:·6e64·6172·6420·2841·4553·2920·6f72·204e··ndard·(AES)·or·N | |||
| 00000ca0:·6577·0a49·6e73·7472·7563·7469·6f6e·7320··ew.Instructions· | |||
| 00000cb0:·2841·4553·2d4e·4929·2065·6e67·696e·652c··(AES-NI)·engine, | |||
| 00000cc0:·2074·6865·2073·7973·7465·6d20·7265·7175···the·system·requ | |||
| 00000cd0:·6972·6573·2074·6861·7420·7468·6520·3c74··ires·that·the·<t | |||
| 00000ce0:·743e·6472·6163·7574·2d66·6970·732d·6165··t>dracut-fips-ae | |||
| 00000cf0:·736e·693c·2f74·743e·0a70·6163·6b61·6765··sni</tt>.package | |||
| 00000d00:·2062·6520·696e·7374·616c·6c65·642e·0a54···be·installed..T | |||
| 00000d10:·6865·203c·636f·6465·3e64·7261·6375·742d··he·<code>dracut- | |||
| 00000d20:·6669·7073·2d61·6573·6e69·3c2f·636f·6465··fips-aesni</code | |||
| 00000d30:·3e20·7061·636b·6167·6520·6361·6e20·6265··>·package·can·be | |||
| 00000d40:·2069·6e73·7461·6c6c·6564·2077·6974·6820···installed·with· | |||
| 00000d50:·7468·6520·666f·6c6c·6f77·696e·6720·636f··the·following·co | |||
| 00000d60:·6d6d·616e·643a·0a3c·7072·653e·0a24·2073··mmand:.<pre>.$·s | |||
| 00000d70:·7564·6f20·7975·6d20·696e·7374·616c·6c20··udo·yum·install· | |||
| 00000d80:·6472·6163·7574·2d66·6970·732d·6165·736e··dracut-fips-aesn | |||
| 00000d90:·693c·2f70·7265·3e0a·2020·2020·2020·3c2f··i</pre>.······</ | |||
| 00000 | 00000cb0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 00000 | 00000cc0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| 00000d | 00000cd0:·3e0a·2020·2020·2020·2020·5573·6520·6f66··>.········Use·of | ||
| 00000ce0:·2061·2036·342d·6269·7420·6f70·6572·6174···a·64-bit·operat | |||
| 00000cf0:·696e·6720·7379·7374·656d·206f·6666·6572··ing·system·offer | |||
| 00000d00:·7320·6120·6665·7720·6164·7661·6e74·6167··s·a·few·advantag | |||
| 00000d10:·6573·2c20·6c69·6b65·2061·206c·6172·6765··es,·like·a·large | |||
| 00000d20:·7220·6164·6472·6573·7320·7370·6163·6520··r·address·space· | |||
| 00000d30:·7261·6e67·6520·666f·720a·4164·6472·6573··range·for.Addres | |||
| 00000d40:·7320·5370·6163·6520·4c61·796f·7574·2052··s·Space·Layout·R | |||
| 00000d50:·616e·646f·6d69·7a61·7469·6f6e·2028·4153··andomization·(AS | |||
| 00000d60:·4c52·2920·616e·6420·7379·7374·656d·6174··LR)·and·systemat | |||
| 00000d70:·6963·2070·7265·7365·6e63·6520·6f66·204e··ic·presence·of·N | |||
| 00000d80:·6f20·6558·6563·7574·6520·616e·6420·4578··o·eXecute·and·Ex | |||
| 00000d90:·6563·7574·6520·4469·7361·626c·6520·284e··ecute·Disable·(N | |||
| 00000da0:·582f·5844·2920·7072·6f74·6563·7469·6f6e··X/XD)·protection | |||
| 00000db0:·2062·6974·732e·0a20·2020·2020·203c·2f74···bits..······</t | |||
| 00000dc0:·643e·0a20·2020·203c·2f74·723e·0a20·2020··d>.····</tr>.··· | |||
| 00000dd0:·203c·7472·3e0a·2020·2020·2020·3c74·643e···<tr>.······<td> | |||
| 00000de0:·5231·3c2f·7464·3e0a·2020·2020·2020·3c74··R1</td>.······<t | |||
| 00000df0:·643e·496e·7374·616c·6c20·7468·6520·6472··d>Install·the·dr | |||
| 00000e00:·6163·7574·2d66·6970·732d·6165·736e·6920··acut-fips-aesni· | |||
| 00000e10:·5061·636b·6167·653c·2f74·643e·0a20·2020··Package</td>.··· | |||
| 00000e20:·2020·203c·7464·2078·6d6c·3a6c·616e·673d·····<td·xml:lang= | |||
| 00000e30:·2265·6e2d·5553·223e·0a20·2020·2020·2020··"en-US">.······· | |||
| 00000e40:·2054·6f20·656e·6162·6c65·2046·4950·5320···To·enable·FIPS· | |||
| 00000e50:·6f6e·2073·7973·7465·6d20·7468·6174·2073··on·system·that·s | |||
| 00000e60:·7570·706f·7274·2074·6865·2041·6476·616e··upport·the·Advan | |||
| 00000e70:·6365·6420·456e·6372·7970·7469·6f6e·2053··ced·Encryption·S | |||
| 00000e80:·7461·6e64·6172·6420·2841·4553·2920·6f72··tandard·(AES)·or | |||
| 00000e90:·204e·6577·0a49·6e73·7472·7563·7469·6f6e···New.Instruction | |||
| 00000ea0:·7320·2841·4553·2d4e·4929·2065·6e67·696e··s·(AES-NI)·engin | |||
| 00000eb0:·652c·2074·6865·2073·7973·7465·6d20·7265··e,·the·system·re | |||
| 00000ec0:·7175·6972·6573·2074·6861·7420·7468·6520··quires·that·the· | |||
| 00000ed0:·3c74·743e·6472·6163·7574·2d66·6970·732d··<tt>dracut-fips- | |||
| 00000ee0:·6165·736e·693c·2f74·743e·0a70·6163·6b61··aesni</tt>.packa | |||
| 00000ef0:·6765·2062·6520·696e·7374·616c·6c65·642e··ge·be·installed. | |||
| 00000f00:·0a54·6865·203c·636f·6465·3e64·7261·6375··.The·<code>dracu | |||
| 00000f10:·742d·6669·7073·2d61·6573·6e69·3c2f·636f··t-fips-aesni</co | |||
| 00000f20:·6465·3e20·7061·636b·6167·6520·6361·6e20··de>·package·can· | |||
| 00000f30:·6265·2069·6e73·7461·6c6c·6564·2077·6974··be·installed·wit | |||
| 00000f40:·6820·7468·6520·666f·6c6c·6f77·696e·6720··h·the·following· | |||
| 00000f50:·636f·6d6d·616e·643a·0a3c·7072·653e·0a24··command:.<pre>.$ | |||
| 00000f60:·2073·7564·6f20·7975·6d20·696e·7374·616c···sudo·yum·instal | |||
| 00000f70:·6c20·6472·6163·7574·2d66·6970·732d·6165··l·dracut-fips-ae | |||
| 00000f80:·736e·693c·2f70·7265·3e0a·2020·2020·2020··sni</pre>.······ | |||
| 00000f90:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | |||
| 00000fa0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | |||
| 00000fb0:·3e0a·2020·2020·2020·2020·5573·6520·6f66··>.········Use·of | |||
| 00000 | 00000fc0:·2077·6561·6b20·6f72·2075·6e74·6573·7465···weak·or·unteste | ||
| 00000 | 00000fd0:·6420·656e·6372·7970·7469·6f6e·2061·6c67··d·encryption·alg | ||
| 00000 | 00000fe0:·6f72·6974·686d·7320·756e·6465·726d·696e··orithms·undermin | ||
| 00000 | 00000ff0:·6573·2074·6865·2070·7572·706f·7365·7320··es·the·purposes· | ||
| 0000 | 00001000:·6f66·2075·7469·6c69·7a69·6e67·2065·6e63··of·utilizing·enc | ||
| 00000 | 00001010:·7279·7074·696f·6e20·746f·0a70·726f·7465··ryption·to.prote | ||
| 00000 | 00001020:·6374·2064·6174·612e·2054·6865·206f·7065··ct·data.·The·ope | ||
| 00000e40:·7469·6e67·2073·7973·7465·6d20·6d75·7374··ting·system·must | |||
| 00000e50:·2069·6d70·6c65·6d65·6e74·2063·7279·7074···implement·crypt | |||
| 00000e60:·6f67·7261·7068·6963·206d·6f64·756c·6573··ographic·modules | |||
| 00000e70:·2061·6468·6572·696e·6720·746f·2074·6865···adhering·to·the | |||
| 00000e80:·2068·6967·6865·720a·7374·616e·6461·7264···higher.standard | |||
| 00000e90:·7320·6170·7072·6f76·6564·2062·7920·7468··s·approved·by·th | |||
| 00000ea0:·6520·6665·6465·7261·6c20·676f·7665·726e··e·federal·govern | |||
| 00000eb0:·6d65·6e74·2073·696e·6365·2074·6869·7320··ment·since·this· | |||
| 00000ec0:·7072·6f76·6964·6573·2061·7373·7572·616e··provides·assuran | |||
| 00000ed0:·6365·2074·6865·7920·6861·7665·2062·6565··ce·they·have·bee | |||
| 00000ee0:·6e20·7465·7374·6564·0a61·6e64·2076·616c··n·tested.and·val | |||
| 00000ef0:·6964·6174·6564·2e0a·2020·2020·2020·3c2f··idated..······</ | |||
| 00000f00:·7464·3e0a·2020·2020·3c2f·7472·3e0a·2020··td>.····</tr>.·· | |||
| 00000f10:·2020·3c74·723e·0a20·2020·2020·203c·7464····<tr>.······<td | |||
| 00000f20:·3e52·313c·2f74·643e·0a20·2020·2020·203c··>R1</td>.······< | |||
| 00000f30:·7464·3e45·6e73·7572·6520·534d·4150·2069··td>Ensure·SMAP·i | |||
| 00000f40:·7320·6e6f·7420·6469·7361·626c·6564·2064··s·not·disabled·d | |||
| 00000f50:·7572·696e·6720·626f·6f74·3c2f·7464·3e0a··uring·boot</td>. | |||
| 00000f60:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 00000f70:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 00000f80:·2020·2020·5468·6520·534d·4150·2069·7320······The·SMAP·is· | |||
| 00000f90:·7573·6564·2074·6f20·7072·6576·656e·7420··used·to·prevent· | |||
| 00000fa0:·7468·6520·7375·7065·7276·6973·6f72·206d··the·supervisor·m | |||
| 00000fb0:·6f64·6520·6672·6f6d·2075·6e69·6e74·656e··ode·from·uninten | |||
| 00000fc0:·7469·6f6e·616c·6c79·2072·6561·6469·6e67··tionally·reading | |||
| 00000fd0:·2f77·7269·7469·6e67·2069·6e74·6f0a·6d65··/writing·into.me | |||
| 00000fe0:·6d6f·7279·2070·6167·6573·2069·6e20·7468··mory·pages·in·th | |||
| 00000ff0:·6520·7573·6572·2073·7061·6365·2c20·6974··e·user·space,·it | |||
| Max diff block lines reached; 2993004/3012624 bytes (99.35%) of diff not shown. | |||
| Offset 30, 14 lines modified | Offset 30, 21 lines modified | ||
| 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 31 | ······························installed·with·the·following·command:········(NX)·support. | 31 | ······························installed·with·the·following·command:········(NX)·support. |
| 32 | ······························$·sudo·yum·install·kernel-PAE | 32 | ······························$·sudo·yum·install·kernel-PAE |
| 33 | ······························The·installation·process·should·also·have | 33 | ······························The·installation·process·should·also·have |
| 34 | ······························configured·the·bootloader·to·load·the·new | 34 | ······························configured·the·bootloader·to·load·the·new |
| 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 36 | ······························modify·/etc/default/grub·if·necessary. | 36 | ······························modify·/etc/default/grub·if·necessary. |
| 37 | ···········································································Use·of·a·64-bit·operating·system | ||
| 38 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 39 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 40 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 41 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 42 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 43 | ···········································································bits. | ||
| 37 | ···········································································Use·of·weak·or·untested·encryption | 44 | ···········································································Use·of·weak·or·untested·encryption |
| 38 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of |
| 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| Offset 55, 38 lines modified | Offset 62, 31 lines modified | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | 63 | ······························within·/etc/default/grub·doesn't·contain·the |
| 57 | ······························argument·nosmap.·Run·the·following·command | 64 | ······························argument·nosmap.·Run·the·following·command |
| 58 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 59 | ······························kernels: | 66 | ······························kernels: |
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 61 | ······························args="nosmap" | 68 | ······························args="nosmap" |
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loade | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5·· | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| 76 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. | 76 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. |
| 77 | ······························When·prompted,·enter·the·password·that·was | 77 | ······························When·prompted,·enter·the·password·that·was |
| 78 | ······························selected. | 78 | ······························selected. |
| 79 | ······························The·grub2·boot·loader·should·have·a | 79 | ······························The·grub2·boot·loader·should·have·a |
| 80 | ······························superuser·account·and·password·protection | 80 | ······························superuser·account·and·password·protection |
| 81 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 81 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 82 | ···········································································configuration·ensures·users·with | 82 | ···········································································configuration·ensures·users·with |
| 83 | ····Set· | 83 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 84 | R5·· | 84 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 85 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 85 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| 86 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. | 86 | ······························#·grub2-setpassword··························whether·to·enter·single-user·mode. |
| 87 | ······························When·prompted,·enter·the·password·that·was | 87 | ······························When·prompted,·enter·the·password·that·was |
| 88 | ······························selected. | 88 | ······························selected. |
| 89 | ······························On·x86·architecture·supporting·VT-d,·the | 89 | ······························On·x86·architecture·supporting·VT-d,·the |
| 90 | ······························IOMMU·manages·the·access·control·policy | 90 | ······························IOMMU·manages·the·access·control·policy |
| Offset 99, 27 lines modified | Offset 99, 14 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·Kernel·page-table·isolation,·add | ||
| 107 | ······························the·argument·pti=on·to·the·default·GRUB·2 | ||
| 108 | ······························command·line·for·the·Linux·operating·system. | ||
| 109 | ······························To·ensure·that·pti=on·is·added·as·a·kernel···Kernel·page-table·isolation·is·a | ||
| 110 | ······························command·line·argument·to·newly·installed·····kernel·feature·that·mitigates·the | ||
| 111 | ····Enable·Kernel·Page-Table··kernels,·add·pti=on·to·the·default·Grub2·····Meltdown·security·vulnerability·and | ||
| 112 | R8··Isolation·(KPTI)··········command·line·for·Linux·operating·systems.····hardens·the·kernel·against·attempts·to | ||
| 113 | ······························Modify·the·line·within·/etc/default/grub·as··bypass·kernel·address·space·layout | ||
| 114 | ······························shown·below:·································randomization·(KASLR). | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·pti=on·..." | ||
| 116 | ······························Run·the·following·command·to·update·command | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·--args="pti=on" | ||
| 119 | ······························The·TPM·security·chip·that·is·available·in | 106 | ······························The·TPM·security·chip·that·is·available·in |
| 120 | ······························most·modern·systems·has·a·hardware·RNG.·It | 107 | ······························most·modern·systems·has·a·hardware·RNG.·It |
| 121 | ······························is·also·used·to·feed·the·entropy·pool,·but | 108 | ······························is·also·used·to·feed·the·entropy·pool,·but |
| 122 | ······························generally·not·credited·entropy.·Use | 109 | ······························generally·not·credited·entropy.·Use |
| 123 | ······························rng_core.default_quality·in·the·kernel | 110 | ······························rng_core.default_quality·in·the·kernel |
| 124 | ······························command·line·to·set·the·trust·level·on·the | 111 | ······························command·line·to·set·the·trust·level·on·the |
| 125 | ······························hardware·generators.·The·trust·level·defines | 112 | ······························hardware·generators.·The·trust·level·defines |
| Offset 146, 89 lines modified | Offset 133, 14 lines modified | ||
| 146 | ······························default/grub·as·shown·below: | 133 | ······························default/grub·as·shown·below: |
| 147 | ······························GRUB_CMDLINE_LINUX="... | 134 | ······························GRUB_CMDLINE_LINUX="... |
| 148 | ······························rng_core.default_quality=500·..." | 135 | ······························rng_core.default_quality=500·..." |
| 149 | ······························Run·the·following·command·to·update·command | 136 | ······························Run·the·following·command·to·update·command |
| 150 | ······························line·for·already·installed·kernels: | 137 | ······························line·for·already·installed·kernels: |
| 151 | ······························#·grubby·--update-kernel=ALL·-- | 138 | ······························#·grubby·--update-kernel=ALL·-- |
| 152 | ······························args="rng_core.default_quality=500" | 139 | ······························args="rng_core.default_quality=500" |
| 153 | ······························A·Machine·Check·Exception·is·an·error | ||
| 154 | ······························generated·by·the·CPU·itdetects·an·error·in | ||
| 155 | ······························itself,·memory·or·I/O·devices.·These·errors | ||
| 156 | ······························may·be·corrected·and·generate·a·check·log | ||
| 157 | ······························entry,·if·an·error·cannot·be·corrected·the | ||
| 158 | ······························kernel·may·panic·or·SIGBUS.·To·force·the | ||
| 159 | ······························kernel·to·panic·on·any·uncorrected·error | ||
| 160 | ······························reported·by·Machine·Check·set·the·MCE | ||
| 161 | ······························tolerance·to·zero·by·adding·mce=0·to·the·····Allowing·uncorrected·errors·to·result | ||
| 162 | R8··Force·kernel·panic·on·····default·GRUB·2·command·line·for·the·Linux····on·a·SIGBUS·may·allow·an·attacker·to | ||
| 163 | ····uncorrected·MCEs··········operating·system.·To·ensure·that·mce=0·is····continue·trying·to·exploit·a | ||
| 164 | ······························added·as·a·kernel·command·line·argument·to···vulnerability·such·as·Rowhammer. | ||
| 165 | ······························newly·installed·kernels,·add·mce=0·to·the | ||
| 166 | ······························default·Grub2·command·line·for·Linux | ||
| 167 | ······························operating·systems.·Modify·the·line·within·/ | ||
| 168 | ······························etc/default/grub·as·shown·below: | ||
| 169 | ······························GRUB_CMDLINE_LINUX="...·mce=0·..." | ||
| 170 | ······························Run·the·following·command·to·update·command | ||
| 171 | ······························line·for·already·installed·kernels: | ||
| 172 | ······························#·grubby·--update-kernel=ALL·--args="mce=0" | ||
| 173 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 174 | ······························vulnerability·which·allows·unprivileged | ||
| 175 | ······························speculative·access·to·data·which·is | ||
| 176 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 177 | ······························page·table·entry·isn't·present.·Select·the | ||
| 178 | ······························appropriate·mitigation·by·adding·the | ||
| 179 | ······························argument·l1tf=flush·to·the·default·GRUB·2 | ||
| 180 | ······························command·line·for·the·Linux·operating·system. | ||
| 181 | ······························To·ensure·that·l1tf=flush·is·added·as·a······The·L1TF·vulnerability·allows·an | ||
| 182 | ······························kernel·command·line·argument·to·newly········attacker·to·bypass·memory·access | ||
| 183 | ····Configure·L1·Terminal·····installed·kernels,·add·l1tf=flush·to·the·····security·controls·imposed·by·the | ||
| Max diff block lines reached; 660793/676131 bytes (97.73%) of diff not shown. | |||
| Offset 1750, 17 lines modified | Offset 1750, 17 lines modified | ||
| 00006d50:·6674·7761·7265·206d·7573·7420·6265·2066··ftware·must·be·f | 00006d50:·6674·7761·7265·206d·7573·7420·6265·2066··ftware·must·be·f | ||
| 00006d60:·726f·6d20·616e·0a61·7070·726f·7665·6420··rom·an.approved· | 00006d60:·726f·6d20·616e·0a61·7070·726f·7665·6420··rom·an.approved· | ||
| 00006d70:·4365·7274·6966·6963·6174·6520·4175·7468··Certificate·Auth | 00006d70:·4365·7274·6966·6963·6174·6520·4175·7468··Certificate·Auth | ||
| 00006d80:·6f72·6974·7920·2843·4129·2e22·0a20·2020··ority·(CA).".··· | 00006d80:·6f72·6974·7920·2843·4129·2e22·0a20·2020··ority·(CA).".··· | ||
| 00006d90:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00006d90:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00006da0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00006da0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00006db0:·2020·3c74·643e·312e·332e·313c·2f74·643e····<td>1.3.1</td> | 00006db0:·2020·3c74·643e·312e·332e·313c·2f74·643e····<td>1.3.1</td> | ||
| 00006dc0:·0a20·2020·2020·203c·7464·3e53·6574·20 | 00006dc0:·0a20·2020·2020·203c·7464·3e53·6574·2074··.······<td>Set·t | ||
| 00006dd0:·6f6f·7420·4c6f·6164·6572·2050·6173·7377··oot·Loader·Passw | |||
| 00006d | 00006dd0:·6865·2055·4546·4920·426f·6f74·204c·6f61··he·UEFI·Boot·Loa | ||
| 00006de0:·6465·7220·5061·7373·776f·7264·3c2f·7464··der·Password</td | |||
| 00006df0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | 00006df0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 00006e00:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | 00006e00:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00006e10:·2020·2020·2020·5468·6520·6772·7562·3220········The·grub2· | 00006e10:·2020·2020·2020·5468·6520·6772·7562·3220········The·grub2· | ||
| 00006e20:·626f·6f74·206c·6f61·6465·7220·7368·6f75··boot·loader·shou | 00006e20:·626f·6f74·206c·6f61·6465·7220·7368·6f75··boot·loader·shou | ||
| 00006e30:·6c64·2068·6176·6520·6120·7375·7065·7275··ld·have·a·superu | 00006e30:·6c64·2068·6176·6520·6120·7375·7065·7275··ld·have·a·superu | ||
| 00006e40:·7365·7220·6163·636f·756e·7420·616e·6420··ser·account·and· | 00006e40:·7365·7220·6163·636f·756e·7420·616e·6420··ser·account·and· | ||
| 00006e50:·7061·7373·776f·7264·0a70·726f·7465·6374··password.protect | 00006e50:·7061·7373·776f·7264·0a70·726f·7465·6374··password.protect | ||
| Offset 1797, 17 lines modified | Offset 1797, 17 lines modified | ||
| 00007040:·6572·6e65·6c20·746f·2075·7365·2c0a·616e··ernel·to·use,.an | 00007040:·6572·6e65·6c20·746f·2075·7365·2c0a·616e··ernel·to·use,.an | ||
| 00007050:·6420·7768·6574·6865·7220·746f·2065·6e74··d·whether·to·ent | 00007050:·6420·7768·6574·6865·7220·746f·2065·6e74··d·whether·to·ent | ||
| 00007060:·6572·2073·696e·676c·652d·7573·6572·206d··er·single-user·m | 00007060:·6572·2073·696e·676c·652d·7573·6572·206d··er·single-user·m | ||
| 00007070:·6f64·652e·0a20·2020·2020·203c·2f74·643e··ode..······</td> | 00007070:·6f64·652e·0a20·2020·2020·203c·2f74·643e··ode..······</td> | ||
| 00007080:·0a20·2020·203c·2f74·723e·0a20·2020·203c··.····</tr>.····< | 00007080:·0a20·2020·203c·2f74·723e·0a20·2020·203c··.····</tr>.····< | ||
| 00007090:·7472·3e0a·2020·2020·2020·3c74·643e·312e··tr>.······<td>1. | 00007090:·7472·3e0a·2020·2020·2020·3c74·643e·312e··tr>.······<td>1. | ||
| 000070a0:·332e·313c·2f74·643e·0a20·2020·2020·203c··3.1</td>.······< | 000070a0:·332e·313c·2f74·643e·0a20·2020·2020·203c··3.1</td>.······< | ||
| 000070b0:·7464·3e53·6574·2074·6865·2055·4546·4920··td>Set·the·UEFI· | |||
| 000070 | 000070b0:·7464·3e53·6574·2042·6f6f·7420·4c6f·6164··td>Set·Boot·Load | ||
| 000070c0:·6572·2050·6173·7377·6f72·6420·696e·2067··er·Password·in·g | |||
| 000070d0:·7 | 000070d0:·7275·6232·3c2f·7464·3e0a·2020·2020·2020··rub2</td>.······ | ||
| 000070e0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | 000070e0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 000070f0:·2d55·5322·3e0a·2020·2020·2020·2020·5468··-US">.········Th | 000070f0:·2d55·5322·3e0a·2020·2020·2020·2020·5468··-US">.········Th | ||
| 00007100:·6520·6772·7562·3220·626f·6f74·206c·6f61··e·grub2·boot·loa | 00007100:·6520·6772·7562·3220·626f·6f74·206c·6f61··e·grub2·boot·loa | ||
| 00007110:·6465·7220·7368·6f75·6c64·2068·6176·6520··der·should·have· | 00007110:·6465·7220·7368·6f75·6c64·2068·6176·6520··der·should·have· | ||
| 00007120:·6120·7375·7065·7275·7365·7220·6163·636f··a·superuser·acco | 00007120:·6120·7375·7065·7275·7365·7220·6163·636f··a·superuser·acco | ||
| 00007130:·756e·7420·616e·6420·7061·7373·776f·7264··unt·and·password | 00007130:·756e·7420·616e·6420·7061·7373·776f·7264··unt·and·password | ||
| 00007140:·0a70·726f·7465·6374·696f·6e20·656e·6162··.protection·enab | 00007140:·0a70·726f·7465·6374·696f·6e20·656e·6162··.protection·enab | ||
| Offset 1846, 461 lines modified | Offset 1846, 461 lines modified | ||
| 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | ||
| 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | ||
| 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | ||
| 000073a0:·7920·2f62·6f6f·742f·6566·692f·4546·492f··y·/boot/efi/EFI/ | 000073a0:·7920·2f62·6f6f·742f·6566·692f·4546·492f··y·/boot/efi/EFI/ | ||
| 000073b0:·7265·6468·6174·2f75·7365·722e·6366·6720··redhat/user.cfg· | 000073b0:·7265·6468·6174·2f75·7365·722e·6366·6720··redhat/user.cfg· | ||
| 000073c0:·5 | 000073c0:·5065·726d·6973·7369·6f6e·733c·2f74·643e··Permissions</td> | ||
| 000073d0:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | |||
| 000073e0:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | |||
| 000073f0:·2020·2020·2046·696c·6520·7065·726d·6973·······File·permis | |||
| 00007400:·7369·6f6e·7320·666f·7220·3c74·743e·2f62··sions·for·<tt>/b | |||
| 00007410:·6f6f·742f·6566·692f·4546·492f·7265·6468··oot/efi/EFI/redh | |||
| 00007420:·6174·2f75·7365·722e·6366·673c·2f74·743e··at/user.cfg</tt> | |||
| 00007430:·2073·686f·756c·6420·6265·2073·6574·2074···should·be·set·t | |||
| 00007440:·6f20·3630·302e·0a0a·546f·2070·726f·7065··o·600...To·prope | |||
| 00007450:·726c·7920·7365·7420·7468·6520·7065·726d··rly·set·the·perm | |||
| 00007460:·6973·7369·6f6e·7320·6f66·203c·636f·6465··issions·of·<code | |||
| 00007470:·3e2f·626f·6f74·2f65·6669·2f45·4649·2f72··>/boot/efi/EFI/r | |||
| 00007480:·6564·6861·742f·7573·6572·2e63·6667·3c2f··edhat/user.cfg</ | |||
| 00007490:·636f·6465·3e2c·2072·756e·2074·6865·2063··code>,·run·the·c | |||
| 000074a0:·6f6d·6d61·6e64·3a0a·3c70·7265·3e24·2073··ommand:.<pre>$·s | |||
| 000074b0:·7564·6f20·6368·6d6f·6420·3630·3020·2f62··udo·chmod·600·/b | |||
| 000074c0:·6f6f·742f·6566·692f·4546·492f·7265·6468··oot/efi/EFI/redh | |||
| 000074d0:·6174·2f75·7365·722e·6366·673c·2f70·7265··at/user.cfg</pre | |||
| 000074e0:·3e0a·2020·2020·2020·3c2f·7464·3e0a·2020··>.······</td>.·· | |||
| 000074f0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00007500:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 00007510:·2020·5072·6f70·6572·2070·6572·6d69·7373····Proper·permiss | |||
| 00007520:·696f·6e73·2065·6e73·7572·6520·7468·6174··ions·ensure·that | |||
| 00007530:·206f·6e6c·7920·7468·6520·726f·6f74·2075···only·the·root·u | |||
| 00007540:·7365·7220·6361·6e20·7265·6164·206f·7220··ser·can·read·or· | |||
| 00007550:·6d6f·6469·6679·2069·6d70·6f72·7461·6e74··modify·important | |||
| 00007560:·2062·6f6f·740a·7061·7261·6d65·7465·7273···boot.parameters | |||
| 00007570:·2e0a·2020·2020·2020·3c2f·7464·3e0a·2020··..······</td>.·· | |||
| 00007580:·2020·3c2f·7472·3e0a·2020·2020·3c74·723e····</tr>.····<tr> | |||
| 00007590:·0a20·2020·2020·203c·7464·3e31·2e33·2e32··.······<td>1.3.2 | |||
| 000075a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | |||
| 000075b0:·5665·7269·6679·2074·6865·2055·4546·4920··Verify·the·UEFI· | |||
| 000075c0:·426f·6f74·204c·6f61·6465·7220·6772·7562··Boot·Loader·grub | |||
| 000075d0:·2e63·6667·2055·7365·7220·4f77·6e65·7273··.cfg·User·Owners | |||
| 000075e0:·6869·703c·2f74·643e·0a20·2020·2020·203c··hip</td>.······< | |||
| 000075f0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | |||
| 00007600:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | |||
| 00007610:·2066·696c·6520·3c74·743e·2f62·6f6f·742f···file·<tt>/boot/ | |||
| 00007620:·6566·692f·4546·492f·7265·6468·6174·2f67··efi/EFI/redhat/g | |||
| 00007630:·7275·622e·6366·673c·2f74·743e·2073·686f··rub.cfg</tt>·sho | |||
| 00007640:·756c·640a·6265·206f·776e·6564·2062·7920··uld.be·owned·by· | |||
| 00007650:·7468·6520·3c74·743e·726f·6f74·3c2f·7474··the·<tt>root</tt | |||
| 00007660:·3e20·7573·6572·2074·6f20·7072·6576·656e··>·user·to·preven | |||
| 00007670:·7420·6465·7374·7275·6374·696f·6e0a·6f72··t·destruction.or | |||
| 00007680:·206d·6f64·6966·6963·6174·696f·6e20·6f66···modification·of | |||
| 00007690:·2074·6865·2066·696c·652e·0a0a·546f·2070···the·file...To·p | |||
| 000076a0:·726f·7065·726c·7920·7365·7420·7468·6520··roperly·set·the· | |||
| 000076b0:·6f77·6e65·7220·6f66·203c·636f·6465·3e2f··owner·of·<code>/ | |||
| 000076c0:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | |||
| 000076d0:·6861·742f·6772·7562·2e63·6667·3c2f·636f··hat/grub.cfg</co | |||
| 000076e0:·6465·3e2c·2072·756e·2074·6865·2063·6f6d··de>,·run·the·com | |||
| 000076f0:·6d61·6e64·3a0a·3c70·7265·3e24·2073·7564··mand:.<pre>$·sud | |||
| 00007700:·6f20·6368·6f77·6e20·726f·6f74·202f·626f··o·chown·root·/bo | |||
| 00007710:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | |||
| 00007720:·742f·6772·7562·2e63·6667·203c·2f70·7265··t/grub.cfg·</pre | |||
| 00007730:·3e0a·2020·2020·2020·3c2f·7464·3e0a·2020··>.······</td>.·· | |||
| 00007740:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00007750:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 00007760:·2020·4f6e·6c79·2072·6f6f·7420·7368·6f75····Only·root·shou | |||
| 00007770:·6c64·2062·6520·6162·6c65·2074·6f20·6d6f··ld·be·able·to·mo | |||
| 00007780:·6469·6679·2069·6d70·6f72·7461·6e74·2062··dify·important·b | |||
| 00007790:·6f6f·7420·7061·7261·6d65·7465·7273·2e0a··oot·parameters.. | |||
| 000077a0:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | |||
| 000077b0:·3c2f·7472·3e0a·2020·2020·3c74·723e·0a20··</tr>.····<tr>.· | |||
| 000077c0:·2020·2020·203c·7464·3e31·2e33·2e32·3c2f·······<td>1.3.2</ | |||
| 00007 | 000077d0:·7464·3e0a·2020·2020·2020·3c74·643e·5665··td>.······<td>Ve | ||
| 000073e0:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 000073f0:·2020·2020·2020·2020·5468·6520·6669·6c65··········The·file | |||
| 00007 | 000077e0:·7269·6679·202f·626f·6f74·2f65·6669·2f45··rify·/boot/efi/E | ||
| 00007 | 000077f0:·4649·2f72·6564·6861·742f·7573·6572·2e63··FI/redhat/user.c | ||
| 00007800:·6667·2055·7365·7220·4f77·6e65·7273·6869··fg·User·Ownershi | |||
| 00007420:·6667·3c2f·7474·3e20·7368·6f75·6c64·2062··fg</tt>·should·b | |||
| 00007430:·6520·6f77·6e65·6420·6279·2074·6865·203c··e·owned·by·the·< | |||
| 00007440:·7474·3e72·6f6f·743c·2f74·743e·0a75·7365··tt>root</tt>.use | |||
| 00007450:·7220·746f·2070·7265·7665·6e74·2072·6561··r·to·prevent·rea | |||
| 00007460:·6469·6e67·206f·7220·6d6f·6469·6669·6361··ding·or·modifica | |||
| 00007470:·7469·6f6e·206f·6620·7468·6520·6669·6c65··tion·of·the·file | |||
| 00007480:·2e0a·0a54·6f20·7072·6f70·6572·6c79·2073··...To·properly·s | |||
| 00007490:·6574·2074·6865·206f·776e·6572·206f·6620··et·the·owner·of· | |||
| 000074a0:·3c63·6f64·653e·2f62·6f6f·742f·6566·692f··<code>/boot/efi/ | |||
| 000074b0:·4546·492f·7265·6468·6174·2f75·7365·722e··EFI/redhat/user. | |||
| 000074c0:·6366·673c·2f63·6f64·653e·2c20·7275·6e20··cfg</code>,·run· | |||
| Max diff block lines reached; 1086216/1128242 bytes (96.28%) of diff not shown. | |||
| Offset 442, 50 lines modified | Offset 442, 82 lines modified | ||
| 442 | ·····························································································approved·Certificate | 442 | ·····························································································approved·Certificate |
| 443 | ·····························································································Authority·(CA)." | 443 | ·····························································································Authority·(CA)." |
| 444 | ·····························································································Password·protection | 444 | ·····························································································Password·protection |
| 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader | 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader |
| 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration | 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration |
| 447 | ······································settings.··············································ensures·users·with | 447 | ······································settings.··············································ensures·users·with |
| 448 | ·····························································································physical·access | 448 | ·····························································································physical·access |
| 449 | 1.3.1·············Set· | 449 | 1.3.1·············Set·the·UEFI·Boot···Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 450 | ··················Password· | 450 | ··················Loader·Password·····generate·a·hash·for·the·password·by·running·the········alter·important |
| 451 | ······································following·command:·····································bootloader·settings. | 451 | ······································following·command:·····································bootloader·settings. |
| 452 | ······································#·grub2-setpassword····································These·include·which | 452 | ······································#·grub2-setpassword····································These·include·which |
| 453 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 453 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 454 | ·····························································································whether·to·enter | 454 | ·····························································································whether·to·enter |
| 455 | ·····························································································single-user·mode. | 455 | ·····························································································single-user·mode. |
| 456 | ·····························································································Password·protection | 456 | ·····························································································Password·protection |
| 457 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader | 457 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader |
| 458 | ······································and·password·protection·enabled·to·protect·boot-time···configuration | 458 | ······································and·password·protection·enabled·to·protect·boot-time···configuration |
| 459 | ······································settings.··············································ensures·users·with | 459 | ······································settings.··············································ensures·users·with |
| 460 | ·····························································································physical·access | 460 | ·····························································································physical·access |
| 461 | 1.3.1·············Set· | 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 462 | ·················· | 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important |
| 463 | ······································following·command:·····································bootloader·settings. | 463 | ······································following·command:·····································bootloader·settings. |
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 469 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 470 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 471 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | ||
| 472 | ·····························································································boot·parameters. | ||
| 473 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 474 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 475 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 476 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 477 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 468 | ·····························································································Only·root·should·be | 478 | ·····························································································Only·root·should·be |
| 469 | ·····························································································able·to·modify | 479 | ·····························································································able·to·modify |
| 470 | ·····························································································important·boot | 480 | ·····························································································important·boot |
| 471 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·owned·parameters.·Also, | 481 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·owned·parameters.·Also, |
| 472 | ··················Verify·/boot/efi/···by·the·root·user·to·prevent·reading·or·modification·of·non-root·users·who | 482 | ··················Verify·/boot/efi/···by·the·root·user·to·prevent·reading·or·modification·of·non-root·users·who |
| 473 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot | 483 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot |
| 474 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be | 484 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be |
| 475 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify | 485 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify |
| 476 | ·····························································································weaknesses·in | 486 | ·····························································································weaknesses·in |
| 477 | ·····························································································security·upon·boot | 487 | ·····························································································security·upon·boot |
| 478 | ·····························································································and·be·able·to | 488 | ·····························································································and·be·able·to |
| 479 | ·····························································································exploit·them. | 489 | ·····························································································exploit·them. |
| 490 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | ||
| 491 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 492 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 493 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | ||
| 494 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | ||
| 480 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | 495 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions |
| 481 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | 496 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the |
| 482 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | 497 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify |
| 483 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | 498 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot |
| 484 | ·····························································································parameters. | 499 | ·····························································································parameters. |
| 500 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 501 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 502 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 503 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 504 | ··················Ownership···········command:···············································this·file·should·not | ||
| 505 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 506 | ·····························································································privileges·anyway. | ||
| 507 | ······································File·permissions·for·/boot/grub2/user.cfg·should·be····Proper·permissions | ||
| 508 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 509 | 1.3.2·············user.cfg············grub2/user.cfg,·run·the·command:·······················root·user·can·read | ||
| 510 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/user.cfg··················or·modify·important | ||
| 511 | ·····························································································boot·parameters. | ||
| 512 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 513 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 514 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 515 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 516 | ·····························································································parameters. | ||
| 485 | ·····························································································The·root·group·is·a | 517 | ·····························································································The·root·group·is·a |
| 486 | ·····························································································highly-privileged | 518 | ·····························································································highly-privileged |
| 487 | ·····························································································group.·Furthermore, | 519 | ·····························································································group.·Furthermore, |
| 488 | ·····························································································the·group-owner·of | 520 | ·····························································································the·group-owner·of |
| 489 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | 521 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not |
| 490 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | 522 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access |
| 491 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | 523 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. |
| Offset 493, 19 lines modified | Offset 525, 26 lines modified | ||
| 493 | ··················Group·Ownership·····command:···············································read·the·boot | 525 | ··················Group·Ownership·····command:···············································read·the·boot |
| 494 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | 526 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be |
| 495 | ·····························································································able·to·identify | 527 | ·····························································································able·to·identify |
| 496 | ·····························································································weaknesses·in | 528 | ·····························································································weaknesses·in |
| 497 | ·····························································································security·upon·boot | 529 | ·····························································································security·upon·boot |
| 498 | ·····························································································and·be·able·to | 530 | ·····························································································and·be·able·to |
| 499 | ·····························································································exploit·them. | 531 | ·····························································································exploit·them. |
| 500 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 501 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 502 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 503 | ·················· | 532 | ·····························································································Only·root·should·be |
| 533 | ·····························································································able·to·modify | ||
| 534 | ·····························································································important·boot | ||
| 535 | ······································The·file·/boot/grub2/user.cfg·should·be·owned·by·the···parameters.·Also, | ||
| 536 | ··················Verify·/boot/grub2/·root·user·to·prevent·reading·or·modification·of·the····non-root·users·who | ||
| 537 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot | ||
| 538 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be | ||
| 539 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify | ||
| 540 | ·····························································································weaknesses·in | ||
| 541 | ·····························································································security·upon·boot | ||
| 542 | ·····························································································and·be·able·to | ||
| 504 | ····························································································· | 543 | ·····························································································exploit·them. |
| 505 | ·····························································································The·root·group·is·a | 544 | ·····························································································The·root·group·is·a |
| 506 | ·····························································································highly-privileged | 545 | ·····························································································highly-privileged |
| 507 | ·····························································································group.·Furthermore, | 546 | ·····························································································group.·Furthermore, |
| 508 | ·····························································································the·group-owner·of | 547 | ·····························································································the·group-owner·of |
| 509 | ·····························································································this·file·should·not | 548 | ·····························································································this·file·should·not |
| 510 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | 549 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access |
| 511 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | 550 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. |
| Offset 513, 60 lines modified | Offset 552, 21 lines modified | ||
| 513 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot | 552 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot |
| 514 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be | 553 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be |
| 515 | ·····························································································able·to·identify | 554 | ·····························································································able·to·identify |
| 516 | ·····························································································weaknesses·in | 555 | ·····························································································weaknesses·in |
| 517 | ·····························································································security·upon·boot | 556 | ·····························································································security·upon·boot |
| 518 | ·····························································································and·be·able·to | 557 | ·····························································································and·be·able·to |
| 519 | ·····························································································exploit·them. | 558 | ·····························································································exploit·them. |
| 520 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 521 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 522 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 523 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 524 | ··················Ownership···········command:···············································this·file·should·not | ||
| 525 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 526 | ·····························································································privileges·anyway. | ||
| Max diff block lines reached; 344690/360476 bytes (95.62%) of diff not shown. | |||
| Offset 40, 57 lines modified | Offset 40, 14 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Red·Hat·Enterprise·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td>Disable·SSH·Root·Login</td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········The·root·user·should·never·be·allowed·to·login·to·a | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 94 | system·directly·over·a·network. | 51 | system·directly·over·a·network. |
| 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 104, 72 lines modified | Offset 61, 14 lines modified | ||
| 104 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 107 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 108 | ······</td> | 65 | ······</td> |
| 109 | ····</tr> | 66 | ····</tr> |
| 110 | ····<tr> | 67 | ····<tr> |
| 111 | ······<td>3.1.1</td> | ||
| 112 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 113 | ······<td·xml:lang="en-US"> | ||
| 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 119 | <pre>[daemon] | ||
| 120 | AutomaticLoginEnable=false</pre> | ||
| 121 | ······</td> | ||
| 122 | ······<td·xml:lang="en-US"> | ||
| 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 124 | system·security. | ||
| 125 | ······</td> | ||
| 126 | ····</tr> | ||
| 127 | ····<tr> | ||
| 128 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 147 | ······<td>Verify·Only·Root·Has·UID·0</td> | ||
| 148 | ······<td·xml:lang="en-US"> | ||
| 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 151 | their·UID·changed. | ||
| 152 | <br·/> | ||
| 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 154 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 155 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 156 | assigned. | ||
| 157 | ······</td> | ||
| 158 | ······<td·xml:lang="en-US"> | ||
| 159 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 160 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 161 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 162 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 163 | access·to·root·privileges·in·an·accountable·manner. | ||
| 164 | ······</td> | ||
| 165 | ····</tr> | ||
| 166 | ····<tr> | ||
| 167 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 168 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> | 69 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> |
| 169 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 170 | ········Disallow·SSH·login·with·empty·passwords. | 71 | ········Disallow·SSH·login·with·empty·passwords. |
| Max diff block lines reached; 464570/469859 bytes (98.87%) of diff not shown. | |||
| Offset 4048, 15 lines modified | Offset 4048, 15 lines modified | ||
| 4048 | <tt>RekeyLimit</tt>. | 4048 | <tt>RekeyLimit</tt>. |
| 4049 | ··</td> | 4049 | ··</td> |
| 4050 | ··<td·xml:lang="en-US"> | 4050 | ··<td·xml:lang="en-US"> |
| 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4052 | time-based·limit,·effects·of·potential·attacks·against | 4052 | time-based·limit,·effects·of·potential·attacks·against |
| 4053 | encryption·keys·are·limited. | 4053 | encryption·keys·are·limited. |
| 4054 | ··</td> | 4054 | ··</td> |
| 4055 | ··<td>var_ssh_client_rekey_limit_ | 4055 | ··<td>var_ssh_client_rekey_limit_size=1G<br/>var_ssh_client_rekey_limit_time=1hour</td> |
| 4056 | </tr> | 4056 | </tr> |
| 4057 | <tr> | 4057 | <tr> |
| 4058 | ··<td></td> | 4058 | ··<td></td> |
| 4059 | ··<td>CCE-83349-1</td> | 4059 | ··<td>CCE-83349-1</td> |
| 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4061 | ··<td·xml:lang="en-US"> | 4061 | ··<td·xml:lang="en-US"> |
| 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 3299, 16 lines modified | Offset 3299, 16 lines modified | ||
| 3299 | ······················································································································options,·which·can | 3299 | ······················································································································options,·which·can |
| 3300 | ······················································································································help·protect | 3300 | ······················································································································help·protect |
| 3301 | ······················································································································programs·which·use | 3301 | ······················································································································programs·which·use |
| 3302 | ······················································································································it. | 3302 | ······················································································································it. |
| 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_size=1G |
| 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_time=1hour |
| 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3311 | ······················································································································Some·SSH | 3311 | ······················································································································Some·SSH |
| 3312 | ······················································································································implementations·use | 3312 | ······················································································································implementations·use |
| 3313 | ······················································································································the·openssl·library | 3313 | ······················································································································the·openssl·library |
| 3314 | ······················································································································for·entropy,·which | 3314 | ······················································································································for·entropy,·which |
| Offset 24853, 18 lines modified | Offset 24853, 18 lines modified | ||
| 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | ||
| 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | ||
| 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | ||
| 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | ||
| 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | ||
| 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | ||
| 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | ||
| 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f7 | 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f73··ar_rekey_limit_s | ||
| 000611c0:·696d·653d·3168·6f75·723c·6272·2f3e·7661··ime=1hour<br/>va | |||
| 000611 | 000611c0:·697a·653d·3147·3c62·722f·3e76·6172·5f72··ize=1G<br/>var_r | ||
| 000611d0:·656b·6579·5f6c·696d·6974·5f74·696d·653d··ekey_limit_time= | |||
| 000611e0:· | 000611e0:·3168·6f75·723c·2f74·643e·0a3c·2f74·723e··1hour</td>.</tr> | ||
| 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | ||
| 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | ||
| 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | ||
| 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | ||
| 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | ||
| 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | ||
| 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US |
| Offset 7818, 16 lines modified | Offset 7818, 16 lines modified | ||
| 7818 | ·····································corresponding·private·key.····························system·where·the | 7818 | ·····································corresponding·private·key.····························system·where·the |
| 7819 | ···························································································associated·public | 7819 | ···························································································associated·public |
| 7820 | ···························································································key·has·been | 7820 | ···························································································key·has·been |
| 7821 | ···························································································installed. | 7821 | ···························································································installed. |
| 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_size=1G |
| 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_time=1hour |
| 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption | 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption |
| 7829 | ···························································································keys·are·limited. | 7829 | ···························································································keys·are·limited. |
| 7830 | ···························································································SSH·implementation | 7830 | ···························································································SSH·implementation |
| 7831 | ···························································································in·Red·Hat | 7831 | ···························································································in·Red·Hat |
| 7832 | ···························································································Enterprise·Linux·8 | 7832 | ···························································································Enterprise·Linux·8 |
| 7833 | ···························································································uses·the·openssl | 7833 | ···························································································uses·the·openssl |
| Offset 68, 14970 lines modified | Offset 68, 14970 lines modified | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | ||
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | ||
| 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | Diff chunk too large, falling back to line-by-line diff (1337 lines added, 1337 lines removed) | |
| 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | ||
| 000004a0:·643e· | 000004a0:·643e·5265·636f·7264·2041·6e79·2041·7474··d>Record·Any·Att | ||
| 000004b0:· | 000004b0:·656d·7074·7320·746f·2052·756e·2063·6863··empts·to·Run·chc | ||
| 000004c0:· | 000004c0:·6f6e·3c2f·7464·3e0a·2020·2020·2020·3c74··on</td>.······<t | ||
| 000004d0:·6 | 000004d0:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | ||
| 000004e0:· | 000004e0:·5322·3e0a·2020·2020·2020·2020·4174·2061··S">.········At·a | ||
| 000004f0:· | 000004f0:·206d·696e·696d·756d·2c20·7468·6520·6175···minimum,·the·au | ||
| 00000500:· | 00000500:·6469·7420·7379·7374·656d·2073·686f·756c··dit·system·shoul | ||
| 00000510:· | 00000510:·6420·636f·6c6c·6563·7420·616e·7920·6578··d·collect·any·ex | ||
| 00000520:· | 00000520:·6563·7574·696f·6e20·6174·7465·6d70·740a··ecution·attempt. | ||
| 00000530:·6 | 00000530:·6f66·2074·6865·203c·7474·3e63·6863·6f6e··of·the·<tt>chcon | ||
| 00000540:·7 | 00000540:·3c2f·7474·3e20·636f·6d6d·616e·6420·666f··</tt>·command·fo | ||
| 00000550:·6 | 00000550:·7220·616c·6c20·7573·6572·7320·616e·6420··r·all·users·and· | ||
| 00000560:·7 | 00000560:·726f·6f74·2e20·4966·2074·6865·203c·7474··root.·If·the·<tt | ||
| 00000570:· | 00000570:·3e61·7564·6974·643c·2f74·743e·0a64·6165··>auditd</tt>.dae | ||
| 00000580:·6 | 00000580:·6d6f·6e20·6973·2063·6f6e·6669·6775·7265··mon·is·configure | ||
| 00000590:· | 00000590:·6420·746f·2075·7365·2074·6865·203c·7474··d·to·use·the·<tt | ||
| 000005a0:· | 000005a0:·3e61·7567·656e·7275·6c65·733c·2f74·743e··>augenrules</tt> | ||
| 000005b0:· | 000005b0:·2070·726f·6772·616d·2074·6f20·7265·6164···program·to·read | ||
| 000005c0:· | 000005c0:·2061·7564·6974·2072·756c·6573·0a64·7572···audit·rules.dur | ||
| 000005d0:· | 000005d0:·696e·6720·6461·656d·6f6e·2073·7461·7274··ing·daemon·start | ||
| 000005e0:· | 000005e0:·7570·2028·7468·6520·6465·6661·756c·7429··up·(the·default) | ||
| 000005f0:· | 000005f0:·2c20·6164·6420·7468·6520·666f·6c6c·6f77··,·add·the·follow | ||
| 00000600:·6 | 00000600:·696e·6720·6c69·6e65·7320·746f·2061·2066··ing·lines·to·a·f | ||
| 00000610:·6 | 00000610:·696c·6520·7769·7468·2073·7566·6669·780a··ile·with·suffix. | ||
| 00000620:· | 00000620:·3c74·743e·2e72·756c·6573·3c2f·7474·3e20··<tt>.rules</tt>· | ||
| 00000630:· | 00000630:·696e·2074·6865·2064·6972·6563·746f·7279··in·the·directory | ||
| 00000640:· | 00000640:·203c·7474·3e2f·6574·632f·6175·6469·742f···<tt>/etc/audit/ | ||
| 00000650:· | 00000650:·7275·6c65·732e·643c·2f74·743e·3a0a·3c70··rules.d</tt>:.<p | ||
| 00000660:· | 00000660:·7265·3e2d·6120·616c·7761·7973·2c65·7869··re>-a·always,exi | ||
| 00000670:· | 00000670:·7420·2d46·2070·6174·683d·2f75·7372·2f62··t·-F·path=/usr/b | ||
| 00000680:· | 00000680:·696e·2f63·6863·6f6e·202d·4620·7065·726d··in/chcon·-F·perm | ||
| 00000690:· | 00000690:·3d78·202d·4620·6175·6964·2667·743b·3d31··=x·-F·auid>=1 | ||
| 000006a0:· | 000006a0:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 000006b0:·65 | 000006b0:·6574·202d·4620·6b65·793d·7072·6976·696c··et·-F·key=privil | ||
| 000006c0:·65 | 000006c0:·6567·6564·3c2f·7072·653e·0a49·6620·7468··eged</pre>.If·th | ||
| 000006d0:· | 000006d0:·6520·3c74·743e·6175·6469·7464·3c2f·7474··e·<tt>auditd</tt | ||
| 000006e0:·3 | 000006e0:·3e20·6461·656d·6f6e·2069·7320·636f·6e66··>·daemon·is·conf | ||
| 000006f0:· | 000006f0:·6967·7572·6564·2074·6f20·7573·6520·7468··igured·to·use·th | ||
| 00000700:·65 | 00000700:·6520·3c74·743e·6175·6469·7463·746c·3c2f··e·<tt>auditctl</ | ||
| 00000710:· | 00000710:·7474·3e0a·7574·696c·6974·7920·746f·2072··tt>.utility·to·r | ||
| 00000720:·6 | 00000720:·6561·6420·6175·6469·7420·7275·6c65·7320··ead·audit·rules· | ||
| 00000730:·7572·6 | 00000730:·6475·7269·6e67·2064·6165·6d6f·6e20·7374··during·daemon·st | ||
| 00000740:· | 00000740:·6172·7475·702c·2061·6464·2074·6865·2066··artup,·add·the·f | ||
| 00000750:· | 00000750:·6f6c·6c6f·7769·6e67·206c·696e·6573·2074··ollowing·lines·t | ||
| 00000760:·6 | 00000760:·6f0a·3c74·743e·2f65·7463·2f61·7564·6974··o.<tt>/etc/audit | ||
| 00000770:· | 00000770:·2f61·7564·6974·2e72·756c·6573·3c2f·7474··/audit.rules</tt | ||
| 00000780:· | 00000780:·3e20·6669·6c65·3a0a·3c70·7265·3e2d·6120··>·file:.<pre>-a· | ||
| 00000790:·6 | 00000790:·616c·7761·7973·2c65·7869·7420·2d46·2070··always,exit·-F·p | ||
| 000007a0:· | 000007a0:·6174·683d·2f75·7372·2f62·696e·2f63·6863··ath=/usr/bin/chc | ||
| 000007b0:·6 | 000007b0:·6f6e·202d·4620·7065·726d·3d78·202d·4620··on·-F·perm=x·-F· | ||
| 000007c0:·6 | 000007c0:·6175·6964·2667·743b·3d31·3030·3020·2d46··auid>=1000·-F | ||
| 000007d0:· | 000007d0:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 000007e0:· | 000007e0:·6b65·793d·7072·6976·696c·6567·6564·3c2f··key=privileged</ | ||
| 000007f0:· | 000007f0:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 00000800:· | 00000800:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000810:· | 00000810:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000820:· | 00000820:·2020·2020·204d·6973·7573·6520·6f66·2070·······Misuse·of·p | ||
| 00000830:· | 00000830:·7269·7669·6c65·6765·6420·6675·6e63·7469··rivileged·functi | ||
| 00000840:·6 | 00000840:·6f6e·732c·2065·6974·6865·7220·696e·7465··ons,·either·inte | ||
| 00000850:· | 00000850:·6e74·696f·6e61·6c6c·7920·6f72·2075·6e69··ntionally·or·uni | ||
| 00000860:·6 | 00000860:·6e74·656e·7469·6f6e·616c·6c79·2062·790a··ntentionally·by. | ||
| 00000870:· | 00000870:·6175·7468·6f72·697a·6564·2075·7365·7273··authorized·users | ||
| 00000880:· | 00000880:·2c20·6f72·2062·7920·756e·6175·7468·6f72··,·or·by·unauthor | ||
| 00000890:·6 | 00000890:·697a·6564·2065·7874·6572·6e61·6c20·656e··ized·external·en | ||
| 000008a0:· | 000008a0:·7469·7469·6573·2074·6861·7420·6861·7665··tities·that·have | ||
| 000008b0:·20 | 000008b0:·2063·6f6d·7072·6f6d·6973·6564·2073·7973···compromised·sys | ||
| 000008c0:· | 000008c0:·7465·6d20·6163·636f·756e·7473·2c0a·6973··tem·accounts,.is | ||
| 000008d0:· | 000008d0:·2061·2073·6572·696f·7573·2061·6e64·206f···a·serious·and·o | ||
| 000008e0:· | 000008e0:·6e67·6f69·6e67·2063·6f6e·6365·726e·2061··ngoing·concern·a | ||
| 000008f0:·6 | 000008f0:·6e64·2063·616e·2068·6176·6520·7369·676e··nd·can·have·sign | ||
| 00000900:·6 | 00000900:·6966·6963·616e·7420·6164·7665·7273·6520··ificant·adverse· | ||
| 00000910:· | 00000910:·696d·7061·6374·7320·6f6e·206f·7267·616e··impacts·on·organ | ||
| 00000920:· | 00000920:·697a·6174·696f·6e73·2e0a·4175·6469·7469··izations..Auditi | ||
| 00000930:·6e6 | 00000930:·6e67·2074·6865·2075·7365·206f·6620·7072··ng·the·use·of·pr | ||
| 00000940:· | 00000940:·6976·696c·6567·6564·2066·756e·6374·696f··ivileged·functio | ||
| 00000950:·7369· | 00000950:·6e73·2069·7320·6f6e·6520·7761·7920·746f··ns·is·one·way·to | ||
| 00000960:· | 00000960:·2064·6574·6563·7420·7375·6368·206d·6973···detect·such·mis | ||
| 00000970:·7 | 00000970:·7573·6520·616e·6420·6964·656e·7469·6679··use·and·identify | ||
| 00000980:· | 00000980:·0a74·6865·2072·6973·6b20·6672·6f6d·2069··.the·risk·from·i | ||
| 00000990:·6 | 00000990:·6e73·6964·6572·2061·6e64·2061·6476·616e··nsider·and·advan | ||
| 000009a0:·63 | 000009a0:·6365·6420·7065·7273·6973·7465·6e74·2074··ced·persistent·t | ||
| 000009b0:· | 000009b0:·6872·6561·7473·2e0a·3c62·7220·2f3e·3c62··hreats..<br·/><b | ||
| 000009c0:· | 000009c0:·7220·2f3e·0a50·7269·7669·6c65·6765·6420··r·/>.Privileged· | ||
| 000009d0:·7 | 000009d0:·7072·6f67·7261·6d73·2061·7265·2073·7562··programs·are·sub | ||
| 000009e0:·6 | 000009e0:·6a65·6374·2074·6f20·6573·6361·6c61·7469··ject·to·escalati | ||
| 000009f0:·6 | 000009f0:·6f6e·2d6f·662d·7072·6976·696c·6567·6520··on-of-privilege· | ||
| 00000a00:·6 | 00000a00:·6174·7461·636b·732c·0a77·6869·6368·2061··attacks,.which·a | ||
| 00000a10:· | 00000a10:·7474·656d·7074·2074·6f20·7375·6276·6572··ttempt·to·subver | ||
| 00000a20:· | 00000a20:·7420·7468·6569·7220·6e6f·726d·616c·2072··t·their·normal·r | ||
| 00000a30:· | 00000a30:·6f6c·6520·6f66·2070·726f·7669·6469·6e67··ole·of·providing | ||
| 00000a40:· | 00000a40:·2073·6f6d·6520·6e65·6365·7373·6172·7920···some·necessary· | ||
| 00000a50:·6 | 00000a50:·6275·740a·6c69·6d69·7465·6420·6361·7061··but.limited·capa | ||
| 00000a60:·6 | 00000a60:·6269·6c69·7479·2e20·4173·2073·7563·682c··bility.·As·such, | ||
| 00000a70:· | 00000a70:·206d·6f74·6976·6174·696f·6e20·6578·6973···motivation·exis | ||
| 00000a80:· | 00000a80:·7473·2074·6f20·6d6f·6e69·746f·7220·7468··ts·to·monitor·th | ||
| 00000a90:·6 | 00000a90:·6573·6520·7072·6f67·7261·6d73·2066·6f72··ese·programs·for | ||
| 00000aa0:· | 00000aa0:·0a75·6e75·7375·616c·2061·6374·6976·6974··.unusual·activit | ||
| 00000ab0:· | 00000ab0:·792e·0a20·2020·2020·203c·2f74·643e·0a20··y..······</td>.· | ||
| 00000ac0:· | 00000ac0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 00000ad0:· | 00000ad0:·3e0a·2020·2020·2020·3c74·643e·4155·2d32··>.······<td>AU-2 | ||
| 00000ae0:· | 00000ae0:·2864·293c·6272·2f3e·4155·2d31·3228·6329··(d)<br/>AU-12(c) | ||
| 00000af0:· | 00000af0:·3c62·722f·3e43·4d2d·3628·6129·3c2f·7464··<br/>CM-6(a)</td | ||
| 00000b00:· | 00000b00:·3e0a·2020·2020·2020·3c74·643e·5265·636f··>.······<td>Reco | ||
| 00000b10:· | 00000b10:·7264·2055·6e73·7563·6365·7373·6675·6c20··rd·Unsuccessful· | ||
| 00000b20:· | 00000b20:·4465·6c65·7465·2041·7474·656d·7074·7320··Delete·Attempts· | ||
| 00000b30:· | 00000b30:·746f·2046·696c·6573·202d·2075·6e6c·696e··to·Files·-·unlin | ||
| 00000b40:· | 00000b40:·6b3c·2f74·643e·0a20·2020·2020·203c·7464··k</td>.······<td | ||
| 00000b50:· | 00000b50:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00000b60:· | 00000b60:·223e·0a20·2020·2020·2020·200a·5468·6520··">.········.The· | ||
| 00000b70:·617 | 00000b70:·6175·6469·7420·7379·7374·656d·2073·686f··audit·system·sho | ||
| 00000b80:·7 | 00000b80:·756c·6420·636f·6c6c·6563·7420·756e·7375··uld·collect·unsu | ||
| 00000b90:·6 | 00000b90:·6363·6573·7366·756c·2066·696c·6520·6465··ccessful·file·de | ||
| 00000ba0:· | 00000ba0:·6c65·7469·6f6e·0a61·7474·656d·7074·7320··letion.attempts· | ||
| 00000bb0:· | 00000bb0:·666f·7220·616c·6c20·7573·6572·7320·616e··for·all·users·an | ||
| 00000bc0:· | 00000bc0:·6420·726f·6f74·2e20·4966·2074·6865·203c··d·root.·If·the·< | ||
| 00000bd0:· | 00000bd0:·7474·3e61·7564·6974·643c·2f74·743e·2064··tt>auditd</tt>·d | ||
| 00000be0:·6 | 00000be0:·6165·6d6f·6e20·6973·2063·6f6e·6669·6775··aemon·is·configu | ||
| 00000bf0:·74 | 00000bf0:·7265·640a·746f·2075·7365·2074·6865·203c··red.to·use·the·< | ||
| 00000c00:· | 00000c00:·7474·3e61·7567·656e·7275·6c65·733c·2f74··tt>augenrules</t | ||
| Max diff block lines reached; 7119688/7304772 bytes (97.47%) of diff not shown. | |||
| Offset 173, 14 lines modified | Offset 173, 28 lines modified | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 175 | anti-spoofing·measure. | 175 | anti-spoofing·measure. |
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| 181 | ······<td·xml:lang="en-US"> | ||
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 183 | <pre> | ||
| 184 | $·sudo·yum·install·iptables</pre> | ||
| 185 | ······</td> | ||
| 186 | ······<td·xml:lang="en-US"> | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 188 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 189 | masquerading,·etc. | ||
| 190 | ······</td> | ||
| 191 | ····</tr> | ||
| 192 | ····<tr> | ||
| 193 | ······<td>Req-1.4.1</td> | ||
| 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 181 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 183 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 184 | ······</td> | 198 | ······</td> |
| 185 | ······<td·xml:lang="en-US"> | 199 | ······<td·xml:lang="en-US"> |
| 186 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a |
| Offset 188, 28 lines modified | Offset 202, 14 lines modified | ||
| 188 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, |
| 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 191 | enables·the·system·to·continue·servicing·valid·connection·requests. | 205 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 192 | ······</td> | 206 | ······</td> |
| 193 | ····</tr> | 207 | ····</tr> |
| 194 | ····<tr> | 208 | ····<tr> |
| 195 | ······<td>Req-1.4.1</td> | ||
| 196 | ······<td>Install·iptables·Package</td> | ||
| 197 | ······<td·xml:lang="en-US"> | ||
| 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 199 | <pre> | ||
| 200 | $·sudo·yum·install·iptables</pre> | ||
| 201 | ······</td> | ||
| 202 | ······<td·xml:lang="en-US"> | ||
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | masquerading,·etc. | ||
| 206 | ······</td> | ||
| 207 | ····</tr> | ||
| 208 | ····<tr> | ||
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 213 | transport·layer·protocol,·designed·to·support·the·idea·of | 213 | transport·layer·protocol,·designed·to·support·the·idea·of |
| 214 | message-oriented·communication,·with·several·streams·of·messages | 214 | message-oriented·communication,·with·several·streams·of·messages |
| 215 | within·one·connection. | 215 | within·one·connection. |
| Offset 246, 32 lines modified | Offset 246, 14 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| 252 | ······<td>Req-1.4.3</td> | 252 | ······<td>Req-1.4.3</td> |
| 253 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> | ||
| 254 | ······<td·xml:lang="en-US"> | ||
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> | ||
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> | ||
| 257 | ······</td> | ||
| 258 | ······<td·xml:lang="en-US"> | ||
| 259 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | ||
| 260 | forward·the·packet·along·a·different·path·than·configured·on·the·router,·which·can | ||
| 261 | be·used·to·bypass·network·security·measures.·This·requirement·applies·only·to·the | ||
| 262 | forwarding·of·source-routerd·traffic,·such·as·when·IPv6·forwarding·is·enabled·and | ||
| 263 | the·system·is·functioning·as·a·router. | ||
| 264 | Accepting·source-routed·packets·in·the·IPv6·protocol·has·few·legitimate | ||
| 265 | uses.·It·should·be·disabled·unless·it·is·absolutely·required. | ||
| 266 | ······</td> | ||
| 267 | ····</tr> | ||
| 268 | ····<tr> | ||
| 269 | ······<td>Req-1.4.3</td> | ||
| 270 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> | 253 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> |
| 271 | ······<td·xml:lang="en-US"> | 254 | ······<td·xml:lang="en-US"> |
| 272 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> | 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> |
| 273 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> | 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> |
| 274 | ······</td> | 257 | ······</td> |
| 275 | ······<td·xml:lang="en-US"> | 258 | ······<td·xml:lang="en-US"> |
| 276 | ········Ignoring·bogus·ICMP·error·responses·reduces | 259 | ········Ignoring·bogus·ICMP·error·responses·reduces |
| Offset 291, 26 lines modified | Offset 273, 28 lines modified | ||
| 291 | <br·/> | 273 | <br·/> |
| 292 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | 274 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast |
| 293 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | 275 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. |
| 294 | ······</td> | 276 | ······</td> |
| 295 | ····</tr> | 277 | ····</tr> |
| 296 | ····<tr> | 278 | ····<tr> |
| 297 | ······<td>Req-1.4.3</td> | 279 | ······<td>Req-1.4.3</td> |
| 298 | ······<td>Disable·Kernel·Parameter·for·Accepting· | 280 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> |
| 299 | ······<td·xml:lang="en-US"> | 281 | ······<td·xml:lang="en-US"> |
| 300 | ········To·set·the·runtime·status·of·the·<code>net.ipv | 282 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> |
| 301 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv | 283 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> |
| 302 | ······</td> | 284 | ······</td> |
| 303 | ······<td·xml:lang="en-US"> | 285 | ······<td·xml:lang="en-US"> |
| 304 | ········ICMP·redirect·messages·are·used·by·routers·to·inform·hosts·that·a·more | ||
| 305 | direct·route·exists·for·a·particular·destination.·These·messages·modify·the | ||
| 306 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect | ||
| 307 | message·could·result·in·a·man-in-the-middle·attack. | ||
| 308 | 286 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | |
| 287 | forward·the·packet·along·a·different·path·than·configured·on·the·router,·which·can | ||
| 288 | be·used·to·bypass·network·security·measures.·This·requirement·applies·only·to·the | ||
| 289 | forwarding·of·source-routerd·traffic,·such·as·when·IPv6·forwarding·is·enabled·and | ||
| 290 | the·system·is·functioning·as·a·router. | ||
| 291 | Accepting·source-routed·packets·in·the·IPv6·protocol·has·few·legitimate | ||
| 309 | be·disabled·unless·absolutely·required. | 292 | uses.·It·should·be·disabled·unless·it·is·absolutely·required. |
| 310 | ······</td> | 293 | ······</td> |
| 311 | ····</tr> | 294 | ····</tr> |
| 312 | ····<tr> | 295 | ····<tr> |
| 313 | ······<td>Req-1.4.3</td> | 296 | ······<td>Req-1.4.3</td> |
| 314 | ······<td>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</td> | 297 | ······<td>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</td> |
| 315 | ······<td·xml:lang="en-US"> | 298 | ······<td·xml:lang="en-US"> |
| 316 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.secure_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0</pre> | 299 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.secure_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0</pre> |
| Offset 334, 14 lines modified | Offset 318, 50 lines modified | ||
| 334 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were | 318 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were |
| 335 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for | 319 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for |
| 336 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small | 320 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small |
| Max diff block lines reached; 286333/293554 bytes (97.54%) of diff not shown. | |||
| Offset 129, 14 lines modified | Offset 129, 23 lines modified | ||
| 129 | ····················································································network·traffic | 129 | ····················································································network·traffic |
| 130 | ····················································································should·be·seen,·all | 130 | ····················································································should·be·seen,·all |
| 131 | ····················································································other·interfaces | 131 | ····················································································other·interfaces |
| 132 | ····················································································should·ignore | 132 | ····················································································should·ignore |
| 133 | ····················································································traffic·on·this | 133 | ····················································································traffic·on·this |
| 134 | ····················································································network·as·an·anti- | 134 | ····················································································network·as·an·anti- |
| 135 | ····················································································spoofing·measure. | 135 | ····················································································spoofing·measure. |
| 136 | ····················································································iptables·controls | ||
| 137 | ····················································································the·Linux·kernel | ||
| 138 | ····················································································network·packet | ||
| 139 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 140 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 141 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 142 | ····················································································set·up·firewalls | ||
| 143 | ····················································································and·IP | ||
| 144 | ····················································································masquerading,·etc. | ||
| 136 | ····················································································A·TCP·SYN·flood | 145 | ····················································································A·TCP·SYN·flood |
| 137 | ····················································································attack·can·cause·a | 146 | ····················································································attack·can·cause·a |
| 138 | ····················································································denial·of·service | 147 | ····················································································denial·of·service |
| 139 | ····················································································by·filling·a | 148 | ····················································································by·filling·a |
| 140 | ····················································································system's·TCP | 149 | ····················································································system's·TCP |
| 141 | ····················································································connection·table | 150 | ····················································································connection·table |
| 142 | ····················································································with·connections·in | 151 | ····················································································with·connections·in |
| Offset 155, 23 lines modified | Offset 164, 14 lines modified | ||
| 155 | ····················································································flood·condition·is | 164 | ····················································································flood·condition·is |
| 156 | ····················································································detected,·and | 165 | ····················································································detected,·and |
| 157 | ····················································································enables·the·system | 166 | ····················································································enables·the·system |
| 158 | ····················································································to·continue | 167 | ····················································································to·continue |
| 159 | ····················································································servicing·valid | 168 | ····················································································servicing·valid |
| 160 | ····················································································connection | 169 | ····················································································connection |
| 161 | ····················································································requests. | 170 | ····················································································requests. |
| 162 | ····················································································iptables·controls | ||
| 163 | ····················································································the·Linux·kernel | ||
| 164 | ····················································································network·packet | ||
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 168 | ····················································································set·up·firewalls | ||
| 169 | ····················································································and·IP | ||
| 170 | ····················································································masquerading,·etc. | ||
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 14 lines modified | Offset 187, 39 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. | 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. |
| 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ | 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ |
| 192 | ·····························dccp.conf: | 192 | ·····························dccp.conf: |
| 193 | ·····························blacklist·dccp | 193 | ·····························blacklist·dccp |
| 194 | ·····························To·set·the·runtime·status·of·the | ||
| 195 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 196 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 197 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 198 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 199 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 200 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 201 | ·····························sysctl.d: | ||
| 202 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 203 | ····················································································Responding·to | ||
| 204 | ····················································································broadcast·(ICMP) | ||
| 205 | ····················································································echoes·facilitates | ||
| 206 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 207 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 208 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 209 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 210 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 211 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 212 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 213 | ·····························sysctl.d:··············································or·multicast | ||
| 214 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 215 | ····················································································system·slightly | ||
| 216 | ····················································································more·difficult·to | ||
| 217 | ····················································································enumerate·on·the | ||
| 218 | ····················································································network. | ||
| 194 | ····················································································Source-routed | 219 | ····················································································Source-routed |
| 195 | ····················································································packets·allow·the | 220 | ····················································································packets·allow·the |
| 196 | ····················································································source·of·the | 221 | ····················································································source·of·the |
| 197 | ····················································································packet·to·suggest | 222 | ····················································································packet·to·suggest |
| 198 | ····················································································routers·forward·the | 223 | ····················································································routers·forward·the |
| 199 | ····················································································packet·along·a | 224 | ····················································································packet·along·a |
| 200 | ····················································································different·path·than | 225 | ····················································································different·path·than |
| Offset 218, 63 lines modified | Offset 243, 14 lines modified | ||
| 218 | ····················································································packets·in·the·IPv6 | 243 | ····················································································packets·in·the·IPv6 |
| 219 | ····················································································protocol·has·few | 244 | ····················································································protocol·has·few |
| 220 | ····················································································legitimate·uses.·It | 245 | ····················································································legitimate·uses.·It |
| 221 | ····················································································should·be·disabled | 246 | ····················································································should·be·disabled |
| 222 | ····················································································unless·it·is | 247 | ····················································································unless·it·is |
| 223 | ····················································································absolutely | 248 | ····················································································absolutely |
| 224 | ····················································································required. | 249 | ····················································································required. |
| 225 | ·····························To·set·the·runtime·status·of·the | ||
| 226 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 227 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 228 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 229 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 230 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 231 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 232 | ·····························sysctl.d: | ||
| 233 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 234 | ····················································································Responding·to | ||
| 235 | ····················································································broadcast·(ICMP) | ||
| 236 | ····················································································echoes·facilitates | ||
| 237 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 238 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 239 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 240 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 241 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 242 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 243 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 244 | ·····························sysctl.d:··············································or·multicast | ||
| 245 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 246 | ····················································································system·slightly | ||
| 247 | ····················································································more·difficult·to | ||
| 248 | ····················································································enumerate·on·the | ||
| 249 | ····················································································network. | ||
| 250 | ····················································································ICMP·redirect | ||
| 251 | ····················································································messages·are·used | ||
| 252 | ····················································································by·routers·to | ||
| 253 | ····················································································inform·hosts·that·a | ||
| 254 | ····················································································more·direct·route | ||
| 255 | ····················································································exists·for·a | ||
| 256 | ····················································································particular | ||
| Max diff block lines reached; 468489/482496 bytes (97.10%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="202 | 3 | ··<xccdf-1.2:version·time="2024-11-08T22:34:47.595062+00:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:amazon_linux:2023"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:amazon_linux:2023"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Linux·2023</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Linux·2023</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml">oval:ssg-installed_OS_is_al2023:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml">oval:ssg-installed_OS_is_al2023:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 40 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 105, 165 lines modified | Offset 105, 165 lines modified | ||
| 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 111 | ······<cpe-lang:platform-specification> | 111 | ······<cpe-lang:platform-specification> |
| 112 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 115 | ··········</cpe-lang:logical-test> | ||
| 116 | ········</cpe-lang:platform> | ||
| 117 | ········<cpe-lang:platform·id="package_firewalld"> | ||
| 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 120 | ··········</cpe-lang:logical-test> | ||
| 121 | ········</cpe-lang:platform> | ||
| 122 | ········<cpe-lang:platform·id="package_audit"> | ||
| 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 125 | ··········</cpe-lang:logical-test> | ||
| 126 | ········</cpe-lang:platform> | ||
| 127 | ········<cpe-lang:platform·id="package_pam"> | ||
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 130 | ··········</cpe-lang:logical-test> | ||
| 131 | ········</cpe-lang:platform> | ||
| 132 | ········<cpe-lang:platform·id="machine_and_mount_var-tmp"> | ||
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 136 | ··········</cpe-lang:logical-test> | ||
| 137 | ········</cpe-lang:platform> | ||
| 138 | ········<cpe-lang:platform·id="package_rsh-server"> | ||
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 141 | ··········</cpe-lang:logical-test> | ||
| 142 | ········</cpe-lang:platform> | ||
| 143 | ········<cpe-lang:platform·id="machine_and_mount_tmp"> | ||
| 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_tmp:def:1"/> | ||
| 147 | ··········</cpe-lang:logical-test> | ||
| 148 | ········</cpe-lang:platform> | ||
| 149 | ········<cpe-lang:platform·id="package_bash"> | ||
| 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 152 | ··········</cpe-lang:logical-test> | ||
| 153 | ········</cpe-lang:platform> | ||
| 154 | ········<cpe-lang:platform·id="machine_and_mount_var-log"> | 112 | ········<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | 115 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 158 | ··········</cpe-lang:logical-test> | 116 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 117 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id=" | 118 | ········<cpe-lang:platform·id="package_nftables"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 120 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 121 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 122 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 168 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id="machine_and_mount_home"> | 129 | ········<cpe-lang:platform·id="machine_and_mount_home"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 174 | ··········</cpe-lang:logical-test> | 133 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 134 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id=" | 135 | ········<cpe-lang:platform·id="grub2"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 179 | ··········</cpe-lang:logical-test> | 138 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 139 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id=" | 140 | ········<cpe-lang:platform·id="machine"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 184 | ··········</cpe-lang:logical-test> | 143 | ··········</cpe-lang:logical-test> |
| 185 | ········</cpe-lang:platform> | 144 | ········</cpe-lang:platform> |
| 186 | ········<cpe-lang:platform·id=" | 145 | ········<cpe-lang:platform·id="package_pam"> |
| 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 190 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 191 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 192 | ········<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> | 150 | ········<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 193 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 194 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 197 | ··········</cpe-lang:logical-test> | 155 | ··········</cpe-lang:logical-test> |
| 198 | ········</cpe-lang:platform> | 156 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id="package_bash"> | ||
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 160 | ··········</cpe-lang:logical-test> | ||
| 161 | ········</cpe-lang:platform> | ||
| 199 | ········<cpe-lang:platform·id="ipv6_enabled"> | 162 | ········<cpe-lang:platform·id="ipv6_enabled"> |
| Max diff block lines reached; 815740/827653 bytes (98.56%) of diff not shown. | |||
| Offset 3, 2263 lines modified | Offset 3, 2263 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>A | 11 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_maxstartups_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>E | 17 | ······<ocil:title>Ensure·SSH·MaxStartups·is·configured</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_maxstartups_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_issue_net_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·permissions·on·System·Login·Banner·for·Remote·Connections</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_issue_net_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_grub2_cfg_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·Group·Ownership</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-selinux_not_disabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·SELinux·is·Not·Disabled</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-selinux_not_disabled_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-dis | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_init_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·-·init_module</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-dis | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_init_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_grub2_cfg_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify· | 65 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·Permissions</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_ | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_ | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_passwd_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_nftables_disabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify·nftables·Service·is·Disabled</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_nftables_disabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_motd_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_logindefs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Set·Password·Hashing·Algorithm·in·/etc/login.defs</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_logindefs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lremovexattr_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·User·Who·Owns·Backup·shadow·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_bind_removed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Uninstall·bind·Package</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_bind_removed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_motd_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Modify·the·System·Message·of·the·Day·Banner</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillock_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillock</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillock_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-set_firewalld_default_zone_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_noexec_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Add·noexec·Option·to·/dev/shm</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_noexec_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 728277/741166 bytes (98.26%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 165 lines modified | Offset 72, 165 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="package_audit"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="package_pam"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 99 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 108 | ······</cpe-lang:logical-test> | ||
| 109 | ····</cpe-lang:platform> | ||
| 110 | ····<cpe-lang:platform·id="machine_and_mount_tmp"> | ||
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_tmp:def:1"/> | ||
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="package_bash"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | ||
| 120 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> | 79 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="package_nftables"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 130 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="machine_and_mount_home"> | 96 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id=" | 102 | ····<cpe-lang:platform·id="grub2"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id=" | 107 | ····<cpe-lang:platform·id="machine"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id=" | 112 | ····<cpe-lang:platform·id="package_pam"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> | 117 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="package_bash"> | ||
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 127 | ······</cpe-lang:logical-test> | ||
| 128 | ····</cpe-lang:platform> | ||
| 166 | ····<cpe-lang:platform·id="ipv6_enabled"> | 129 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | 134 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id="machine_and_mount_var"> | 141 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> |
| Max diff block lines reached; 36807/48799 bytes (75.43%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 139 lines modified | Offset 71, 112 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="machine_and_package_ | 93 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 115 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | 111 | ········</cpe-lang:logical-test> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 122 | ········ | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 123 | ········</cpe-lang:logical-test> | ||
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ········ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="grub2"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="aa | 126 | ····<cpe-lang:platform·id="package_iptables"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="machine"> | 131 | ····<cpe-lang:platform·id="machine"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_ | 136 | ····<cpe-lang:platform·id="package_pam"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="p | 141 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_l | 146 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | ||
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 153 | ········</cpe-lang:logical-test> | ||
| 158 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="package_ | 156 | ····<cpe-lang:platform·id="package_logrotate"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="package_ntp"> | 161 | ····<cpe-lang:platform·id="package_ntp"> |
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id="non-uefi"> | ||
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | ||
| 173 | ······</cpe-lang:logical-test> | ||
| 174 | ····</cpe-lang:platform> | ||
| 175 | ····<cpe-lang:platform·id=" | 166 | ····<cpe-lang:platform·id="package_bind"> |
| Max diff block lines reached; 81156/94798 bytes (85.61%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 186 lines modified | Offset 71, 186 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_audit"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="machine_and_package_ | 83 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_bind"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ········ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 123 | ········</cpe-lang:logical-test> | 98 | ········</cpe-lang:logical-test> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | 101 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 105 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="grub2"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="package_iptables"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="machine"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_ | 126 | ····<cpe-lang:platform·id="package_pam"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_g | 131 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 158 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id=" | 138 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="package_ | 143 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 147 | ········</cpe-lang:logical-test> | ||
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | ||
| 168 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="package_logrotate"> |
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 173 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 174 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 175 | ····<cpe-lang:platform·id=" | 158 | ····<cpe-lang:platform·id="package_bind"> |
| 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| Max diff block lines reached; 80169/93142 bytes (86.07%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 216 lines modified | Offset 71, 216 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_audit"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="machine_and_ | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 118 | ········</cpe-lang:logical-test> | ||
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ········ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 121 | ········</cpe-lang:logical-test> | ||
| 122 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 131 | ········</cpe-lang:logical-test> | 111 | ········</cpe-lang:logical-test> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | ||
| 139 | ····</cpe-lang:platform> | ||
| 140 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="machine"> | 131 | ····<cpe-lang:platform·id="machine"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_pam"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="package_bash"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id="package_g | 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 105992/118864 bytes (89.17%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 216 lines modified | Offset 71, 216 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_audit"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="machine_and_ | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 118 | ········</cpe-lang:logical-test> | ||
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ········ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 121 | ········</cpe-lang:logical-test> | ||
| 122 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 131 | ········</cpe-lang:logical-test> | 111 | ········</cpe-lang:logical-test> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | ||
| 139 | ····</cpe-lang:platform> | ||
| 140 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="machine"> | 131 | ····<cpe-lang:platform·id="machine"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_pam"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="package_bash"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id="package_g | 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 105939/118769 bytes (89.20%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation. | 42 | in·order·to·support·security·automation. |
| 43 | ········<html:br/> | 43 | ········<html:br/> |
| Offset 554, 15 lines modified | Offset 554, 15 lines modified | ||
| 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 555 | ············</xccdf-1.2:check> | 555 | ············</xccdf-1.2:check> |
| 556 | ··········</xccdf-1.2:Rule> | 556 | ··········</xccdf-1.2:Rule> |
| 557 | ········</xccdf-1.2:Group> | 557 | ········</xccdf-1.2:Group> |
| 558 | ······</xccdf-1.2:Group> | 558 | ······</xccdf-1.2:Group> |
| 559 | ····</xccdf-1.2:Benchmark> | 559 | ····</xccdf-1.2:Benchmark> |
| 560 | ··</ds:component> | 560 | ··</ds:component> |
| 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-0 | 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 563 | ······<oval-def:generator> | 563 | ······<oval-def:generator> |
| 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 566 | ········<oval:schema_version>5.11</oval:schema_version> | 566 | ········<oval:schema_version>5.11</oval:schema_version> |
| 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 568 | ······</oval-def:generator> | 568 | ······</oval-def:generator> |
| Offset 591, 15 lines modified | Offset 591, 15 lines modified | ||
| 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 593 | ··········<ind:instance·datatype="int">1</ind:instance> | 593 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 594 | ········</ind:textfilecontent54_object> | 594 | ········</ind:textfilecontent54_object> |
| 595 | ······</oval-def:objects> | 595 | ······</oval-def:objects> |
| 596 | ····</oval-def:oval_definitions> | 596 | ····</oval-def:oval_definitions> |
| 597 | ··</ds:component> | 597 | ··</ds:component> |
| 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-0 | 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 599 | ····<ocil:ocil> | 599 | ····<ocil:ocil> |
| 600 | ······<ocil:generator> | 600 | ······<ocil:generator> |
| 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 603 | ········<ocil:schema_version>2.0</ocil:schema_version> | 603 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 605 | ······</ocil:generator> | 605 | ······</ocil:generator> |
| Offset 650, 15 lines modified | Offset 650, 15 lines modified | ||
| 650 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | 650 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control |
| 651 | The·output·should·contain·ahlt | 651 | The·output·should·contain·ahlt |
| 652 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | 652 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> |
| 653 | ········</ocil:boolean_question> | 653 | ········</ocil:boolean_question> |
| 654 | ······</ocil:questions> | 654 | ······</ocil:questions> |
| 655 | ····</ocil:ocil> | 655 | ····</ocil:ocil> |
| 656 | ··</ds:component> | 656 | ··</ds:component> |
| 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-0 | 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 659 | ······<oval-def:generator> | 659 | ······<oval-def:generator> |
| 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 662 | ········<oval:schema_version>5.11</oval:schema_version> | 662 | ········<oval:schema_version>5.11</oval:schema_version> |
| 663 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 663 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 664 | ······</oval-def:generator> | 664 | ······</oval-def:generator> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation. | 9 | in·order·to·support·security·automation. |
| 10 | ····<html:br/> | 10 | ····<html:br/> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 67 lines modified | Offset 72, 98 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····</cpe-lang:platform> | ||
| 85 | ····<cpe-lang:platform·id="ocp4-on-gcp"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> | ||
| 88 | ······</cpe-lang:logical-test> | ||
| 89 | ····</cpe-lang:platform> | ||
| 90 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | ||
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | ||
| 94 | ····</cpe-lang:platform> | ||
| 79 | ····<cpe-lang:platform·id="ocp4-on-sdn"> | 95 | ····<cpe-lang:platform·id="ocp4-on-sdn"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="ocp4-n | 100 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | ||
| 109 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 113 | ······</cpe-lang:logical-test> | ||
| 114 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 115 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 93 | ········</cpe-lang:logical-test> | 119 | ········</cpe-lang:logical-test> |
| 94 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 120 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 121 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | 124 | ········</cpe-lang:logical-test> |
| 101 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 109 | ······</cpe-lang:logical-test> | ||
| 110 | ····</cpe-lang:platform> | ||
| 111 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id="ocp4- | 133 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 136 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 137 | ········</cpe-lang:logical-test> | ||
| 138 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-n | 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 141 | ········</cpe-lang:logical-test> | ||
| 119 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> | 144 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 125 | ········</cpe-lang:logical-test> | 148 | ········</cpe-lang:logical-test> |
| 126 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 149 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 150 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 129 | ········</cpe-lang:logical-test> | 155 | ········</cpe-lang:logical-test> |
| 130 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="ocp4-master-node"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | ||
| 162 | ····</cpe-lang:platform> | ||
| 132 | ····<cpe-lang:platform·id="ocp4-node"> | 163 | ····<cpe-lang:platform·id="ocp4-node"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.9"> | 168 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.9"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Offset 147, 121 lines modified | Offset 178, 90 lines modified | ||
| 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> | 178 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> |
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | 179 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> |
| 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | 180 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 150 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | 181 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 151 | ········</cpe-lang:logical-test> | 182 | ········</cpe-lang:logical-test> |
| 152 | ······</cpe-lang:logical-test> | 183 | ······</cpe-lang:logical-test> |
| 153 | ····</cpe-lang:platform> | 184 | ····</cpe-lang:platform> |
| 154 | ····<cpe-lang:platform·id="ocp4-on- | 185 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift_and_not_ocp4-on-hypershift-hosted"> |
| Max diff block lines reached; 13280/26011 bytes (51.06%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-7"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-7"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·7</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·7</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·7.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·7.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 414 lines modified | Offset 72, 414 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="krb5_server_older_than_1_17-18_and_krb5_workstation_older_than_1_17-18"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-krb5_server_older_than_1_17_18:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-krb5_workstation_older_than_1_17_18:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····< | 79 | ····<cpe-lang:platform·id="selinux"> |
| 85 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 88 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id="package_a | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_a | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="package_ | 95 | ····<cpe-lang:platform·id="package_yum"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="machine_and_ | 100 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 109 | ······</cpe-lang:logical-test> | ||
| 110 | ····</cpe-lang:platform> | ||
| 111 | ····<cpe-lang:platform·id="selinux"> | ||
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-s | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="package_apparmor"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_apparmor:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="machine_and_ | 106 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 110 | ········</cpe-lang:logical-test> | ||
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id="machine_and_ | 116 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 131 | ········</cpe-lang:logical-test> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_libreswan"> | 127 | ····<cpe-lang:platform·id="package_libreswan"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="not_aa | 132 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 149 | ········</cpe-lang:logical-test> | 136 | ········</cpe-lang:logical-test> |
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-p | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 152 | ········</cpe-lang:logical-test> | 139 | ········</cpe-lang:logical-test> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="machine_and_ | 143 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 160 | ······</cpe-lang:logical-test> | ||
| 161 | ····</cpe-lang:platform> | ||
| 162 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> | ||
| 163 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 149 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id=" | 155 | ····<cpe-lang:platform·id="grub2"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 177 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="package_iptables"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 452617/466685 bytes (96.99%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 461 lines modified | Offset 72, 461 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="krb5_server_older_than_1_17-18_and_krb5_workstation_older_than_1_17-18"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-krb5_server_older_than_1_17_18:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-krb5_workstation_older_than_1_17_18:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····< | 79 | ····<cpe-lang:platform·id="selinux"> |
| 85 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 88 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id="package_a | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_a | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="package_ | 95 | ····<cpe-lang:platform·id="package_yum"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="machine_and_ | 100 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 109 | ······</cpe-lang:logical-test> | ||
| 110 | ····</cpe-lang:platform> | ||
| 111 | ····<cpe-lang:platform·id="selinux"> | ||
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-s | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="package_apparmor"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_apparmor:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="machine_and_ | 106 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 110 | ········</cpe-lang:logical-test> | ||
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id="machine_and_ | 116 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 131 | ········</cpe-lang:logical-test> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_libreswan"> | 127 | ····<cpe-lang:platform·id="package_libreswan"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="not_aa | 132 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 149 | ········</cpe-lang:logical-test> | 136 | ········</cpe-lang:logical-test> |
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-p | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 152 | ········</cpe-lang:logical-test> | 139 | ········</cpe-lang:logical-test> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="machine_and_ | 143 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 149 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 155 | ····<cpe-lang:platform·id="grub2"> |
| 168 | ······<cpe-lang:logical-test·operator=" | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="package_iptables"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 165 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| Max diff block lines reached; 507285/521612 bytes (97.25%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-9"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-9"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·9</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·9</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·9.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·9.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 410 lines modified | Offset 72, 410 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_a | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_a | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_ | 95 | ····<cpe-lang:platform·id="package_yum"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="machine_and_ | 100 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="selinux"> | ||
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-s | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | ||
| 109 | ····</cpe-lang:platform> | ||
| 110 | ····<cpe-lang:platform·id="package_apparmor"> | ||
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_apparmor:def:1"/> | ||
| 113 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="machine_and_package_ | 106 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 119 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id=" | 112 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 125 | ········</cpe-lang:logical-test> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="package_libreswan"> | 117 | ····<cpe-lang:platform·id="package_libreswan"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="not_aa | 122 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-p | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 141 | ········</cpe-lang:logical-test> | 129 | ········</cpe-lang:logical-test> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="machine_and_ | 133 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 139 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="grub2"> |
| 157 | ······<cpe-lang:logical-test·operator=" | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="package_iptables"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="no | 155 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="machine"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-n | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 165 | ····<cpe-lang:platform·id="package_pam"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 182 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 183 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 184 | ····<cpe-lang:platform·id="package_r | 170 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 185 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 420615/435467 bytes (96.59%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 200 lines modified | Offset 71, 200 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | ||
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_audit"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_ | 88 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 99 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | 103 | ········</cpe-lang:logical-test> |
| 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 110 | ········</cpe-lang:logical-test> | 106 | ········</cpe-lang:logical-test> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········ | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 117 | ········</cpe-lang:logical-test> | ||
| 118 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 119 | ········ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 120 | ········</cpe-lang:logical-test> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="grub2"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="package_b | 121 | ····<cpe-lang:platform·id="package_iptables"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_b | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="machine"> | 126 | ····<cpe-lang:platform·id="machine"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="package_pam"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_bash"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_g | 146 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 150 | ········</cpe-lang:logical-test> | ||
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | ||
| 158 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="package_logrotate"> | 156 | ····<cpe-lang:platform·id="package_logrotate"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 168 | ······</cpe-lang:logical-test> | ||
| 169 | ····</cpe-lang:platform> | ||
| 170 | ····<cpe-lang:platform·id="non-uefi"> | ||
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | ||
| 173 | ······</cpe-lang:logical-test> | ||
| Max diff block lines reached; 92366/106283 bytes (86.91%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 112, 144 lines modified | Offset 112, 144 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 122 | ··········</cpe-lang:logical-test> | ||
| 123 | ········</cpe-lang:platform> | ||
| 124 | ········<cpe-lang:platform·id="package_firewalld"> | 119 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 127 | ··········</cpe-lang:logical-test> | ||
| 128 | ········</cpe-lang:platform> | ||
| 129 | ········<cpe-lang:platform·id="package_audit"> | ||
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 132 | ··········</cpe-lang:logical-test> | ||
| 133 | ········</cpe-lang:platform> | ||
| 134 | ········<cpe-lang:platform·id="package_pam"> | ||
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 137 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 125 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 127 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 142 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 128 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 143 | ············</cpe-lang:logical-test> | 129 | ············</cpe-lang:logical-test> |
| 144 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 130 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 145 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 131 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 146 | ············</cpe-lang:logical-test> | 132 | ············</cpe-lang:logical-test> |
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 147 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 148 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 149 | ········<cpe-lang:platform·id=" | 136 | ········<cpe-lang:platform·id="machine_and_package_avahi"> |
| 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ············ | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 153 | ············</cpe-lang:logical-test> | ||
| 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 155 | ············ | 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 156 | ············</cpe-lang:logical-test> | ||
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 158 | ··········</cpe-lang:logical-test> | 140 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 141 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id=" | 142 | ········<cpe-lang:platform·id="grub2"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 145 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 146 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 147 | ········<cpe-lang:platform·id="package_iptables"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 168 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id="machine"> | 152 | ········<cpe-lang:platform·id="machine"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 173 | ··········</cpe-lang:logical-test> | 155 | ··········</cpe-lang:logical-test> |
| 174 | ········</cpe-lang:platform> | 156 | ········</cpe-lang:platform> |
| 175 | ········<cpe-lang:platform·id=" | 157 | ········<cpe-lang:platform·id="package_pam"> |
| 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 180 | ··········</cpe-lang:logical-test> | 160 | ··········</cpe-lang:logical-test> |
| 181 | ········</cpe-lang:platform> | 161 | ········</cpe-lang:platform> |
| 182 | ········<cpe-lang:platform·id=" | 162 | ········<cpe-lang:platform·id="package_bash"> |
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 185 | ··········</cpe-lang:logical-test> | 165 | ··········</cpe-lang:logical-test> |
| 186 | ········</cpe-lang:platform> | 166 | ········</cpe-lang:platform> |
| 187 | ········<cpe-lang:platform·id=" | 167 | ········<cpe-lang:platform·id="ipv6_enabled"> |
| 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 191 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 192 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 193 | ········<cpe-lang:platform·id="package_ntp"> | 172 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 176 | ············</cpe-lang:logical-test> | ||
| 177 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 178 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 179 | ············</cpe-lang:logical-test> | ||
| 196 | ··········</cpe-lang:logical-test> | 180 | ··········</cpe-lang:logical-test> |
| 197 | ········</cpe-lang:platform> | 181 | ········</cpe-lang:platform> |
| Max diff block lines reached; 617309/630485 bytes (97.91%) of diff not shown. | |||
| Offset 3, 4942 lines modified | Offset 3, 4851 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_noexec_removable_partitions_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·Group·Who·Owns·group·File</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-service_debug-shell_disabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·debug-shell·SystemD·Service</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-service_debug-shell_disabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_gshadow_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_d_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Verify·Owner·on·cron.d</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_d_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_name_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·Names</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-group_unique_name_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·User</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-no_files_unowned_by_user_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-ss | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces·by·Default</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-ss | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_fchownat_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record·Successful·Ownership·Changes·to·Files·-·fchownat</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_fchownat_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_motd_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_disk_full_action_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Configure·audispd's·Plugin·disk_full_action·When·Disk·Is·Full</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_disk_full_action_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_daily_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Group·Who·Owns·cron.daily</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-package_aide_installed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Install·AIDE</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-package_aide_installed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_send_redirects_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_suid_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·All·SUID·Executables·Are·Authorized</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_suid_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_allow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify· | 89 | ······<ocil:title>Verify·User·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-file_ | 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_name_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·Names</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-account_unique_name_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_lremovexattr_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Record·Successful·Permission·Changes·to·Files·-·lremovexattr</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-s | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_lremovexattr_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_allow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify· | 107 | ······<ocil:title>Verify·Group·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 109 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_group_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Record· | 113 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/group</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_group_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-require_emergency_target_auth_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Require·Authentication·for·Emergency·Systemd·Target</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-require_emergency_target_auth_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 535883/548480 bytes (97.70%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 144 lines modified | Offset 71, 144 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | 78 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_audit"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_pam"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 84 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 102 | ········</cpe-lang:logical-test> | 88 | ········</cpe-lang:logical-test> |
| 103 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 89 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 105 | ········</cpe-lang:logical-test> | 91 | ········</cpe-lang:logical-test> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 111 | ········ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 112 | ········</cpe-lang:logical-test> | ||
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 114 | ········ | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="grub2"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 106 | ····<cpe-lang:platform·id="package_iptables"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="machine"> | 111 | ····<cpe-lang:platform·id="machine"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="package_pam"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="package_bash"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="package_ntp"> | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 135 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | ||
| 155 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="uefi"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_ | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="package_ntp"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_a | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 166 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="ip | 158 | ····<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 38478/52045 bytes (73.93%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 142 lines modified | Offset 116, 142 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 128 | ········<cpe-lang:platform·id="package_ | 123 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 131 | ··········</cpe-lang:logical-test> | ||
| 132 | ········</cpe-lang:platform> | ||
| 133 | ········<cpe-lang:platform·id="package_pam"> | ||
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id=" | 129 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 143 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 134 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 137 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 147 | ············</cpe-lang:logical-test> | 138 | ············</cpe-lang:logical-test> |
| 148 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 149 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 140 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 150 | ············</cpe-lang:logical-test> | 141 | ············</cpe-lang:logical-test> |
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 151 | ··········</cpe-lang:logical-test> | 143 | ··········</cpe-lang:logical-test> |
| 152 | ········</cpe-lang:platform> | 144 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id=" | 145 | ········<cpe-lang:platform·id="grub2"> |
| 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 157 | ············</cpe-lang:logical-test> | ||
| 158 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ············ | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 160 | ············</cpe-lang:logical-test> | ||
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 162 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 163 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 164 | ········<cpe-lang:platform·id="aa | 150 | ········<cpe-lang:platform·id="package_iptables"> |
| 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 167 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 168 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 169 | ········<cpe-lang:platform·id="machine"> | 155 | ········<cpe-lang:platform·id="machine"> |
| 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 172 | ··········</cpe-lang:logical-test> | 158 | ··········</cpe-lang:logical-test> |
| 173 | ········</cpe-lang:platform> | 159 | ········</cpe-lang:platform> |
| 174 | ········<cpe-lang:platform·id="package_ | 160 | ········<cpe-lang:platform·id="package_pam"> |
| 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 177 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 178 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 179 | ········<cpe-lang:platform·id="package_g | 165 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 168 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 169 | ············</cpe-lang:logical-test> | ||
| 170 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 171 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 172 | ············</cpe-lang:logical-test> | ||
| 182 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 184 | ········<cpe-lang:platform·id="package_logrotate"> | 175 | ········<cpe-lang:platform·id="package_logrotate"> |
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 187 | ··········</cpe-lang:logical-test> | 178 | ··········</cpe-lang:logical-test> |
| 188 | ········</cpe-lang:platform> | 179 | ········</cpe-lang:platform> |
| 189 | ········<cpe-lang:platform·id="package_p | 180 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_p | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 192 | ··········</cpe-lang:logical-test> | 185 | ··········</cpe-lang:logical-test> |
| 193 | ········</cpe-lang:platform> | 186 | ········</cpe-lang:platform> |
| 194 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 187 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 195 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | 188 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 198 | ··········</cpe-lang:logical-test> | 191 | ··········</cpe-lang:logical-test> |
| 199 | ········</cpe-lang:platform> | 192 | ········</cpe-lang:platform> |
| Max diff block lines reached; 747800/760572 bytes (98.32%) of diff not shown. | |||
| Offset 3, 2497 lines modified | Offset 3, 2497 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_messages_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·User·Who·Owns·/var/log/messages·File</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lremovexattr_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Configure·Speculative·Store·Bypass·Mitigation</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-grub2_spec_store_bypass_disable_argument_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-package_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_audit_installed_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·the·audit·Subsystem·is·Installed</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-package_ | 25 | ········<ocil:test_action_ref>ocil:ssg-package_audit_installed_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-a | 28 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·/var/log·Located·On·Separate·Partition</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-a | 31 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·se | 35 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-p | 40 | ····<ocil:questionnaire·id="ocil:ssg-prefer_64bit_os_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Prefer·to·use·a·64-bit·Operating·System·when·supported</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-p | 43 | ········<ocil:test_action_ref>ocil:ssg-prefer_64bit_os_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_disabled_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-ser | 49 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchownat</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchownat_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-no_all_squash_exports_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·All-Squashing·Disabled·On·All·Exports</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-no_all_squash_exports_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_notifiers_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Enable·checks·on·notifier·call·chains</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_notifiers_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_group_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chmod_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chmod</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_chmod_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-grub2_enable_iommu_force_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>IOMMU·configuration·directive</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-grub2_enable_iommu_force_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_fs_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·kernel·debugfs</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_fs_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Prevent·Login·to·Accounts·With·Empty·Password</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Enable· | 101 | ······<ocil:title>Enable·seccomp·to·safely·compute·untrusted·bytecode</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ena | 107 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·hibernation</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> |
| Max diff block lines reached; 652065/664703 bytes (98.10%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 142 lines modified | Offset 71, 142 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_pam"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 89 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 102 | ········</cpe-lang:logical-test> | 93 | ········</cpe-lang:logical-test> |
| 103 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 105 | ········</cpe-lang:logical-test> | 96 | ········</cpe-lang:logical-test> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="grub2"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 112 | ········</cpe-lang:logical-test> | ||
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 114 | ········ | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="aa | 105 | ····<cpe-lang:platform·id="package_iptables"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="machine"> | 110 | ····<cpe-lang:platform·id="machine"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="package_ | 115 | ····<cpe-lang:platform·id="package_pam"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_g | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | ||
| 137 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="package_logrotate"> | 130 | ····<cpe-lang:platform·id="package_logrotate"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id="package_p | 135 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_p | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 147 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 142 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 150 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | ||
| 152 | ····</cpe-lang:platform> | ||
| 155 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | 153 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 158 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 159 | ········</cpe-lang:logical-test> | 157 | ········</cpe-lang:logical-test> |
| 160 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 161 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 162 | ········</cpe-lang:logical-test> | 160 | ········</cpe-lang:logical-test> |
| 163 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="package_ | 163 | ····<cpe-lang:platform·id="package_chrony"> |
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| Max diff block lines reached; 47941/60325 bytes (79.47%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 336 lines modified | Offset 71, 336 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> | ||
| 78 | ····<cpe-lang:platform·id="krb5_server_older_than_1_17-18_and_krb5_workstation_older_than_1_17-18"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-krb5_server_older_than_1_17_18:def:1"/> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-krb5_workstation_older_than_1_17_18:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_a | 84 | ····<cpe-lang:platform·id="package_nftables"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_a | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="machine_and_not_s | 95 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 99 | ········</cpe-lang:logical-test> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 108 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 119 | ········</cpe-lang:logical-test> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="package_libreswan"> | 116 | ····<cpe-lang:platform·id="package_libreswan"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 126 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id="not_aa | 121 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 132 | ········</cpe-lang:logical-test> | 125 | ········</cpe-lang:logical-test> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 135 | ········</cpe-lang:logical-test> | 128 | ········</cpe-lang:logical-test> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="machine_and_mount_ | 132 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_ | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 138 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_ | 143 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator=" | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 148 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="machine"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="package_ | 158 | ····<cpe-lang:platform·id="package_pam"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_b | 163 | ····<cpe-lang:platform·id="package_bash"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_b | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id="package_usbguard"> | 168 | ····<cpe-lang:platform·id="package_usbguard"> |
| Max diff block lines reached; 28233/42656 bytes (66.19%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHV-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHV-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Virtualization·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Virtualization·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Virtualization·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Virtualization·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 292 lines modified | Offset 71, 292 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_audit"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_pam"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 98 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> | ||
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="selinux"> | 78 | ····<cpe-lang:platform·id="selinux"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="package_yum"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="machine_and_not_osb | 88 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_ | 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 119 | ········</cpe-lang:logical-test> | 92 | ········</cpe-lang:logical-test> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 121 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> | ||
| 124 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 127 | ······</cpe-lang:logical-test> | ||
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="machine_and_package_ | 98 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | ||
| 134 | ····</cpe-lang:platform> | ||
| 135 | ····<cpe-lang:platform·id="nfs_mount_defined"> | ||
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-nfs_mount_defined:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | ||
| 139 | ····</cpe-lang:platform> | ||
| 140 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="package_bind"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 104 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 154 | ········</cpe-lang:logical-test> | ||
| 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ········ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 157 | ········</cpe-lang:logical-test> | ||
| 158 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 109 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 164 | ········</cpe-lang:logical-test> | 113 | ········</cpe-lang:logical-test> |
| 165 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 166 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 115 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 167 | ········</cpe-lang:logical-test> | 116 | ········</cpe-lang:logical-test> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> | ||
| 174 | ······</cpe-lang:logical-test> | ||
| 175 | ····</cpe-lang:platform> | ||
| 176 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 179 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 180 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 181 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="grub2"> |
| 182 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| Max diff block lines reached; 281667/293411 bytes (96.00%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·12.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·12.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 359 lines modified | Offset 72, 359 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_a | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_a | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 99 | ········</cpe-lang:logical-test> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 109 | ········</cpe-lang:logical-test> | ||
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 112 | ········</cpe-lang:logical-test> | ||
| 102 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 115 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 116 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 117 | ····<cpe-lang:platform·id="package_libreswan"> | 126 | ····<cpe-lang:platform·id="package_libreswan"> |
| 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 120 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 122 | ····<cpe-lang:platform·id="not_aa | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | 135 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 129 | ········</cpe-lang:logical-test> | 138 | ········</cpe-lang:logical-test> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 131 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="machine_and_ | 142 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 148 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 154 | ····<cpe-lang:platform·id="grub2"> |
| 145 | ······<cpe-lang:logical-test·operator=" | 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 159 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="no | 164 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 169 | ····<cpe-lang:platform·id="machine"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-n | 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 172 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 173 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 174 | ····<cpe-lang:platform·id="package_pam"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 177 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 178 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 179 | ····<cpe-lang:platform·id="package_bash"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| Max diff block lines reached; 185376/200125 bytes (92.63%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-15"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-15"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·15.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 387 lines modified | Offset 72, 387 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_a | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_a | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 99 | ········</cpe-lang:logical-test> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="seli | 105 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-se | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_ap | 111 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | ||
| 107 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="machine_and_package_ | 121 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 119 | ········</cpe-lang:logical-test> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="package_libreswan"> | 132 | ····<cpe-lang:platform·id="package_libreswan"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 126 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id="not_aa | 137 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 132 | ········</cpe-lang:logical-test> | 141 | ········</cpe-lang:logical-test> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 135 | ········</cpe-lang:logical-test> | 144 | ········</cpe-lang:logical-test> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 137 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="machine_and_mount_ | 154 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_ | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_ | 165 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator=" | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> | ||
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> | ||
| 173 | ······</cpe-lang:logical-test> | ||
| 174 | ····</cpe-lang:platform> | ||
| 156 | ····<cpe-lang:platform·id="machine | 175 | ····<cpe-lang:platform·id="machine"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 160 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 180 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| Max diff block lines reached; 206452/220435 bytes (93.66%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 32 lines modified | Offset 116, 32 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="machine"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id="package_ | 128 | ········<cpe-lang:platform·id="package_pam"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_ | 133 | ········<cpe-lang:platform·id="package_audit"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id=" | 138 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 143 | ······</cpe-lang:platform-specification> | 143 | ······</cpe-lang:platform-specification> |
| 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| Offset 1382, 31 lines modified | Offset 1382, 31 lines modified | ||
| 1382 | ············</xccdf-1.2:description> | 1382 | ············</xccdf-1.2:description> |
| 1383 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> | 1383 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> |
| 1384 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> | 1384 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> |
| 1385 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> | 1385 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> |
| 1386 | ············<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. | 1386 | ············<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. |
| 1387 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> | 1387 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> |
| 1388 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> | 1388 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> |
| 1389 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1390 | name·=·"policycoreutils-python-utils" | ||
| 1391 | version·=·"*"</xccdf-1.2:fix> | ||
| 1389 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed | 1392 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed |
| 1390 | ··package: | 1393 | ··package: |
| 1391 | ····name:·policycoreutils-python-utils | 1394 | ····name:·policycoreutils-python-utils |
| 1392 | ····state:·present | 1395 | ····state:·present |
| 1393 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1396 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1394 | ··tags: | 1397 | ··tags: |
| 1395 | ··-·CCE-94091-6 | 1398 | ··-·CCE-94091-6 |
| 1396 | ··-·DISA-STIG-SLEM-05-654220 | 1399 | ··-·DISA-STIG-SLEM-05-654220 |
| 1397 | ··-·enable_strategy | 1400 | ··-·enable_strategy |
| 1398 | ··-·low_complexity | 1401 | ··-·low_complexity |
| 1399 | ··-·low_disruption | 1402 | ··-·low_disruption |
| 1400 | ··-·medium_severity | 1403 | ··-·medium_severity |
| 1401 | ··-·no_reboot_needed | 1404 | ··-·no_reboot_needed |
| 1402 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> | 1405 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> |
| 1403 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1404 | name·=·"policycoreutils-python-utils" | ||
| 1405 | version·=·"*"</xccdf-1.2:fix> | ||
| 1406 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils | 1406 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils |
| 1407 | class·install_policycoreutils-python-utils·{ | 1407 | class·install_policycoreutils-python-utils·{ |
| 1408 | ··package·{·'policycoreutils-python-utils': | 1408 | ··package·{·'policycoreutils-python-utils': |
| 1409 | ····ensure·=>·'installed', | 1409 | ····ensure·=>·'installed', |
| 1410 | ··} | 1410 | ··} |
| 1411 | }</xccdf-1.2:fix> | 1411 | }</xccdf-1.2:fix> |
| Offset 1446, 31 lines modified | Offset 1446, 31 lines modified | ||
| 1446 | ··············<html:code>setfiles</html:code> | 1446 | ··············<html:code>setfiles</html:code> |
| 1447 | ··············to·label·filesystems, | 1447 | ··············to·label·filesystems, |
| 1448 | ··············<html:code>newrole</html:code> | 1448 | ··············<html:code>newrole</html:code> |
| 1449 | ··············to | 1449 | ··············to |
| 1450 | switch·roles,·and·so·on. | 1450 | switch·roles,·and·so·on. |
| 1451 | ············</xccdf-1.2:rationale> | 1451 | ············</xccdf-1.2:rationale> |
| 1452 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> | 1452 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> |
| 1453 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1454 | name·=·"policycoreutils" | ||
| 1455 | version·=·"*"</xccdf-1.2:fix> | ||
| 1453 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed | 1456 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed |
| 1454 | ··package: | 1457 | ··package: |
| 1455 | ····name:·policycoreutils | 1458 | ····name:·policycoreutils |
| 1456 | ····state:·present | 1459 | ····state:·present |
| 1457 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1460 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1458 | ··tags: | 1461 | ··tags: |
| 1459 | ··-·CCE-94097-3 | 1462 | ··-·CCE-94097-3 |
| 1460 | ··-·DISA-STIG-SLEM-05-431010 | 1463 | ··-·DISA-STIG-SLEM-05-431010 |
| 1461 | ··-·enable_strategy | 1464 | ··-·enable_strategy |
| 1462 | ··-·low_complexity | 1465 | ··-·low_complexity |
| 1463 | ··-·low_disruption | 1466 | ··-·low_disruption |
| 1464 | ··-·low_severity | 1467 | ··-·low_severity |
| 1465 | ··-·no_reboot_needed | 1468 | ··-·no_reboot_needed |
| 1466 | ··-·package_policycoreutils_installed</xccdf-1.2:fix> | 1469 | ··-·package_policycoreutils_installed</xccdf-1.2:fix> |
| 1467 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| Max diff block lines reached; 107634/117804 bytes (91.37%) of diff not shown. | |||
| Offset 3, 317 lines modified | Offset 3, 317 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-se | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_insmod_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure· | 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·insmod</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-se | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_insmod_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_usermod_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 23 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·usermod</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_usermod_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setsebool_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·the·default·plugins·for·the·audit·dispatcher·are·Installed</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-audit | 31 | ········<ocil:test_action_ref>ocil:ssg-package_audit-audispd-plugins_installed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Install·policycoreutils·Package</ocil:title> | 35 | ······<ocil:title>Install·policycoreutils·Package</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-package_policycoreutils_installed_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-package_policycoreutils_installed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_gpasswd_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·gpasswd</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_gpasswd_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-a | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_logon_fail_delay_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure· | 47 | ······<ocil:title>Ensure·the·Logon·Failure·Delay·is·Set·Correctly·in·login.defs</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_logon_fail_delay_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_ocil:questionnaire:1"> | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_selinux_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>SL | 59 | ······<ocil:title>An·SELinux·Context·must·be·configured·for·default·pam_tally2·file·option</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_file_action:testaction:1</ocil:test_action_ref> | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_file_selinux_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_passwd_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·passwd</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_passwd_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_newgrp_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Install·policycoreutils-python-utils·package</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-a | 73 | ········<ocil:test_action_ref>ocil:ssg-package_policycoreutils-python-utils_installed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_s | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_agent_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Record·Any·Attempts·to·Run·ssh-agent</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_s | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ssh_agent_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_selinux_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudo_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudo</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-a | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudo_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_crontab_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·crontab</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_crontab_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_vendor_supported_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_rmmod_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·rmmod</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_rmmod_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-s | 100 | ····<ocil:questionnaire·id="ocil:ssg-selinux_policytype_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Configure·SELinux·Policy</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-s | 103 | ········<ocil:test_action_ref>ocil:ssg-selinux_policytype_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Enable·SSH·Warning·Banner</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_warning_banner_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chage_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chage</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chage_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | ||
| 117 | ····</ocil:questionnaire> | ||
| 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faildelay_delay_ocil:questionnaire:1"> | ||
| 119 | ······<ocil:title>Enforce·Delay·After·Failed·Logon·Attempts</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faildelay_delay_action:testaction:1</ocil:test_action_ref> | ||
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 84923/97444 bytes (87.15%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 32 lines modified | Offset 71, 32 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="package_ | 83 | ····<cpe-lang:platform·id="package_pam"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_ | 88 | ····<cpe-lang:platform·id="package_audit"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 98 | ··</cpe-lang:platform-specification> | 98 | ··</cpe-lang:platform-specification> |
| 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| Offset 1337, 31 lines modified | Offset 1337, 31 lines modified | ||
| 1337 | ········</xccdf-1.2:description> | 1337 | ········</xccdf-1.2:description> |
| 1338 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> | 1338 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> |
| 1339 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> | 1339 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> |
| 1340 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> | 1340 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> |
| 1341 | ········<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. | 1341 | ········<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. |
| 1342 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> | 1342 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> |
| 1343 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> | 1343 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> |
| 1344 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1345 | name·=·"policycoreutils-python-utils" | ||
| 1346 | version·=·"*"</xccdf-1.2:fix> | ||
| 1344 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed | 1347 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed |
| 1345 | ··package: | 1348 | ··package: |
| 1346 | ····name:·policycoreutils-python-utils | 1349 | ····name:·policycoreutils-python-utils |
| 1347 | ····state:·present | 1350 | ····state:·present |
| 1348 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1351 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1349 | ··tags: | 1352 | ··tags: |
| 1350 | ··-·CCE-94091-6 | 1353 | ··-·CCE-94091-6 |
| 1351 | ··-·DISA-STIG-SLEM-05-654220 | 1354 | ··-·DISA-STIG-SLEM-05-654220 |
| 1352 | ··-·enable_strategy | 1355 | ··-·enable_strategy |
| 1353 | ··-·low_complexity | 1356 | ··-·low_complexity |
| 1354 | ··-·low_disruption | 1357 | ··-·low_disruption |
| 1355 | ··-·medium_severity | 1358 | ··-·medium_severity |
| 1356 | ··-·no_reboot_needed | 1359 | ··-·no_reboot_needed |
| 1357 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> | 1360 | ··-·package_policycoreutils-python-utils_installed</xccdf-1.2:fix> |
| 1358 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1359 | name·=·"policycoreutils-python-utils" | ||
| 1360 | version·=·"*"</xccdf-1.2:fix> | ||
| 1361 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils | 1361 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils |
| 1362 | class·install_policycoreutils-python-utils·{ | 1362 | class·install_policycoreutils-python-utils·{ |
| 1363 | ··package·{·'policycoreutils-python-utils': | 1363 | ··package·{·'policycoreutils-python-utils': |
| 1364 | ····ensure·=>·'installed', | 1364 | ····ensure·=>·'installed', |
| 1365 | ··} | 1365 | ··} |
| 1366 | }</xccdf-1.2:fix> | 1366 | }</xccdf-1.2:fix> |
| Offset 1401, 31 lines modified | Offset 1401, 31 lines modified | ||
| 1401 | ··········<html:code>setfiles</html:code> | 1401 | ··········<html:code>setfiles</html:code> |
| 1402 | ··········to·label·filesystems, | 1402 | ··········to·label·filesystems, |
| 1403 | ··········<html:code>newrole</html:code> | 1403 | ··········<html:code>newrole</html:code> |
| 1404 | ··········to | 1404 | ··········to |
| 1405 | switch·roles,·and·so·on. | 1405 | switch·roles,·and·so·on. |
| 1406 | ········</xccdf-1.2:rationale> | 1406 | ········</xccdf-1.2:rationale> |
| 1407 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> | 1407 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> |
| 1408 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1409 | name·=·"policycoreutils" | ||
| 1410 | version·=·"*"</xccdf-1.2:fix> | ||
| 1408 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed | 1411 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed |
| 1409 | ··package: | 1412 | ··package: |
| 1410 | ····name:·policycoreutils | 1413 | ····name:·policycoreutils |
| 1411 | ····state:·present | 1414 | ····state:·present |
| 1412 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1415 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1413 | ··tags: | 1416 | ··tags: |
| 1414 | ··-·CCE-94097-3 | 1417 | ··-·CCE-94097-3 |
| 1415 | ··-·DISA-STIG-SLEM-05-431010 | 1418 | ··-·DISA-STIG-SLEM-05-431010 |
| 1416 | ··-·enable_strategy | 1419 | ··-·enable_strategy |
| 1417 | ··-·low_complexity | 1420 | ··-·low_complexity |
| 1418 | ··-·low_disruption | 1421 | ··-·low_disruption |
| 1419 | ··-·low_severity | 1422 | ··-·low_severity |
| 1420 | ··-·no_reboot_needed | 1423 | ··-·no_reboot_needed |
| 1421 | ··-·package_policycoreutils_installed</xccdf-1.2:fix> | 1424 | ··-·package_policycoreutils_installed</xccdf-1.2:fix> |
| 1422 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1423 | name·=·"policycoreutils" | ||
| 1424 | version·=·"*"</xccdf-1.2:fix> | ||
| 1425 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils | 1425 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils |
| 1426 | class·install_policycoreutils·{ | 1426 | class·install_policycoreutils·{ |
| 1427 | ··package·{·'policycoreutils': | 1427 | ··package·{·'policycoreutils': |
| 1428 | ····ensure·=>·'installed', | 1428 | ····ensure·=>·'installed', |
| 1429 | ··} | 1429 | ··} |
| 1430 | }</xccdf-1.2:fix> | 1430 | }</xccdf-1.2:fix> |
| Offset 3690, 14 lines modified | Offset 3690, 17 lines modified | ||
| 3690 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-10.5.3</xccdf-1.2:reference> | 3690 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-10.5.3</xccdf-1.2:reference> |
| 3691 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000342-GPOS-00133</xccdf-1.2:reference> | 3691 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000342-GPOS-00133</xccdf-1.2:reference> |
| 3692 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">10.3.3</xccdf-1.2:reference> | 3692 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">10.3.3</xccdf-1.2:reference> |
| 3693 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-653025</xccdf-1.2:reference> | 3693 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-653025</xccdf-1.2:reference> |
| 3694 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261413r996652_rule</xccdf-1.2:reference> | 3694 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261413r996652_rule</xccdf-1.2:reference> |
| 3695 | ······<xccdf-1.2:rationale>Information·stored·in·one·location·is·vulnerable·to·accidental·or·incidental·deletion·or·alteration.·Off-loading·is·a·common·process·in·information·systems·with·limited·audit·storage·capacity.</xccdf-1.2:rationale> | 3695 | ······<xccdf-1.2:rationale>Information·stored·in·one·location·is·vulnerable·to·accidental·or·incidental·deletion·or·alteration.·Off-loading·is·a·common·process·in·information·systems·with·limited·audit·storage·capacity.</xccdf-1.2:rationale> |
| 3696 | ······<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94096-5</xccdf-1.2:ident> | 3696 | ······<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94096-5</xccdf-1.2:ident> |
| 3697 | ······<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_audit-audispd-plugins_installed">[[packages]] | ||
| 3698 | name·=·"audit-audispd-plugins" | ||
| 3699 | version·=·"*"</xccdf-1.2:fix> | ||
| 3697 | ······<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_audit-audispd-plugins_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·audit-audispd-plugins·is·installed | 3700 | ······<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_audit-audispd-plugins_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·audit-audispd-plugins·is·installed |
| 3698 | ··package: | 3701 | ··package: |
| 3699 | ····name:·audit-audispd-plugins | 3702 | ····name:·audit-audispd-plugins |
| Max diff block lines reached; 926/10861 bytes (8.53%) of diff not shown. | |||
| Offset 3, 2231 lines modified | Offset 3, 2231 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-s | 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Set·Password·Maximum·Age</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-s | 13 | ········<ocil:test_action_ref>ocil:ssg-accounts_maximum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_no_authenticate_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo·!authenticate</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sudo_remove_no_authenticate_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-a | 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_overflow_action_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ac | 35 | ······<ocil:title>Appropriate·Action·Must·be·Setup·When·the·Internal·Audit·Event·Queue·is·Full</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-auditd_overflow_action_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_libreswan_installed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Install·libreswan·Package</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-p | 43 | ········<ocil:test_action_ref>ocil:ssg-package_libreswan_installed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·SSH·Support·for·.rhosts·Files</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-a | 58 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·/var/log·Located·On·Separate·Partition</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-a | 61 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchown_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchown</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchown_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_passwd_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·User·Who·Owns·passwd·File</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_binary_dirs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Verify·that·System·Executables·Have·Root·Ownership</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-no_rsh_trust_files_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Remove·Rsh·Trust·Files</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-no_rsh_trust_files_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_error_action_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_stig_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Configure·auditd·Disk· | 101 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_ | 103 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_error_action_stig_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_passwd_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·User·Who·Owns·Backup·passwd·File</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_no_sanity_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·poison·without·sanity·check</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_poisoning_no_sanity_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-service_qpidd_disabled_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_ | 124 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> |
| Max diff block lines reached; 708072/720810 bytes (98.23%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2024-11-09">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 158 lines modified | Offset 71, 158 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_audit"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="machine_and_package_ | 83 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 99 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_bind"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ········ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 123 | ········</cpe-lang:logical-test> | 98 | ········</cpe-lang:logical-test> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | 101 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="grub2"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="aa | 110 | ····<cpe-lang:platform·id="package_iptables"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="machine"> | 115 | ····<cpe-lang:platform·id="machine"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_ | 120 | ····<cpe-lang:platform·id="package_pam"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_g | 125 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 132 | ········</cpe-lang:logical-test> | ||
| 153 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_logrotate"> | 135 | ····<cpe-lang:platform·id="package_logrotate"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="package_ | 140 | ····<cpe-lang:platform·id="package_bind"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 163 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 152 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 166 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="package_rsh-server"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | ||
| Max diff block lines reached; 62268/74052 bytes (84.09%) of diff not shown. | |||